Your phone knows where you are, who you talk to, what you search for, what you buy, and what you look at. Every app you installed asked for permissions. You tapped "Allow" because you wanted to use the app.
Now you have 40-80 apps with access to your camera, microphone, location, contacts, and files. Some of those apps share your data with hundreds of third parties. You probably have not checked your permissions since you installed the apps.
This checklist takes 15 minutes. You will know exactly what your phone is sharing, with whom, and how to stop it.
Before You Start
You need your phone (iPhone or Android) and 15 uninterrupted minutes. You will be going through settings menus, so have the phone unlocked and ready.
This checklist covers the highest-impact privacy settings. There are dozens more, but these are the ones that affect the most people and leak the most data.
Part 1: Location Tracking (3 Minutes)
Location data is the most sensitive information your phone collects. It reveals where you live, where you work, where your kids go to school, your doctor's office, your church, your therapist, your movements every day.
iPhone
- Open Settings > Privacy & Security > Location Services
- Scroll through the list of apps
- For each app, ask: "Does this app need my location to function?"
- Weather app: yes (for local forecast)
- Calculator: no
- Shopping apps: probably not
- Social media: usually not
- Change apps that do not need location to Never
- Change apps that sometimes need location to While Using the App
- Turn off Precise Location for apps that only need approximate location (weather, news)
- Check System Services at the bottom - turn off "Significant Locations" (this logs everywhere you go)
Android
- Open Settings > Location > App Location Permissions
- Check which apps have "Allowed all the time" - this means they track you 24/7
- Change to "Allowed only while using" or "Ask every time"
- In Location settings, tap Google Location History and turn it off (or delete your history)
- Go to Settings > Privacy > Permission Manager > Location for a full list
What you will find: Most people discover 15-20 apps with location access that do not need it. Food delivery apps tracking you when you are not ordering. Games that have no reason to know where you are. Flashlight apps with location permissions.
Part 2: Camera and Microphone Access (2 Minutes)
These permissions let apps see and hear you. Some apps activate the camera or microphone in the background.
iPhone
- Settings > Privacy & Security > Camera - review which apps have access
- Settings > Privacy & Security > Microphone - same review
- Remove access for any app that does not need it for core function
- Note the indicator dots: orange dot = microphone active, green dot = camera active
Android
- Settings > Privacy > Permission Manager > Camera
- Settings > Privacy > Permission Manager > Microphone
- Remove access for apps that do not need it
- Enable the privacy indicators in Settings > Privacy so you see when camera/mic are active
What you will find: Social media apps typically request both. Browsers request both. Some shopping apps request camera access for barcode scanning but you can grant it only when using the app.
Part 3: Contacts and Call Log (2 Minutes)
Apps with contact access can read your entire address book including names, phone numbers, email addresses, and physical addresses.
iPhone
- Settings > Privacy & Security > Contacts
- Remove access from apps that do not need your full contact list
- Messaging apps need contacts. Most other apps do not.
Android
- Settings > Privacy > Permission Manager > Contacts
- Also check Call Log permission - apps with this can see who you call and when
- Phone permission lets apps make and manage phone calls
What you will find: Many social media apps request contacts to "find your friends." This uploads your entire address book to their servers. You can find friends without giving them your dentist's phone number.
Part 4: Background App Activity (3 Minutes)
Apps running in the background can collect data continuously even when you are not using them.
iPhone
- Settings > General > Background App Refresh
- Turn off for apps that do not need to update in the background
- News and messaging apps may benefit from background refresh. Shopping and social apps do not.
Android
- Settings > Apps - tap each app and check Battery > Background activity
- Restrict background activity for apps you do not use frequently
- Check Settings > Privacy > Ads - reset your advertising ID or opt out of personalized ads
Part 5: App Tracking and Advertising (2 Minutes)
Your phone has an advertising ID that follows you across apps and websites. Apps use it to build a profile of your behavior.
iPhone
- Settings > Privacy & Security > Tracking
- Turn off "Allow Apps to Request to Track"
- This prevents apps from asking to track you across other apps and websites
Android
- Settings > Privacy > Ads
- Turn on "Delete advertising ID" or "Opt out of Ads Personalization"
- Reset your advertising ID periodically
Part 6: Browser and Search Privacy (2 Minutes)
Your browser collects more data than most apps.
All Phones
- Open your default browser's settings
- Clear browsing data - cookies, cached images, site data
- Enable Do Not Track (limited effectiveness but no downside)
- Turn off search suggestions if they send your keystrokes to a server
- Consider switching default search to DuckDuckGo or Brave Search for less tracking
Chrome Specific
- Settings > Privacy and Security > Clear Browsing Data
- Settings > Privacy and Security > Cookies - block third-party cookies
- Settings > Google > Ads - opt out of personalization
Safari Specific
- Settings > Safari > Privacy & Security
- Enable "Prevent Cross-Site Tracking"
- Enable "Hide IP Address from Trackers"
Part 7: Cloud and Backup Settings (1 Minute)
Cloud backups can include photos, messages, health data, and passwords.
iPhone
- Settings > [Your Name] > iCloud - review what is being backed up
- Disable iCloud backup for sensitive apps you do not want in the cloud
- Check Advanced Data Protection for end-to-end encrypted backups
Android
- Settings > Google > Backup - see what is included
- Review which data types are being synced to Google
What You Have Accomplished
In 15 minutes you have:
-
Removed unnecessary location access from 15-20 apps
-
Restricted camera and microphone access to apps that need it
-
Stopped apps from reading your contacts without good reason
-
Reduced background data collection
-
Limited advertising tracking across apps
-
Cleaned up browser tracking
-
Reviewed cloud backup settings
This is a significant improvement. But privacy settings change with every app update, and new apps bring new permissions. This audit should be repeated every 3-6 months.
Automate Your Privacy Audit
Doing this manually every few months is tedious. Missing one setting change can undo your work. PhoneAuditor automates the entire process - scanning your phone's permissions, identifying privacy risks, and generating a report with specific recommendations for your device and apps.
One scan instead of 15 minutes of settings menus. Repeated automatically so your privacy stays current.