The permissions that matter
A permission is a standing grant, not a single event. Judge each request against the app's purpose. A map needs your location, and a flashlight needs nothing at all. The grants worth your attention are location, microphone, camera, contacts, photos, Bluetooth and local network access. Contacts deserve special care, because granting that permission uploads other people's names and numbers, not only your own.
Current phones offer middle settings, and they are the right default.
- Location can be granted only while the app is in use, and it can be set to approximate, which places you within a few miles.
- Photo access can be limited to the pictures you select instead of the whole library.
- The cross-app tracking request can be refused for every app with one switch.
- A colored dot or icon at the top of the screen shows when the camera or microphone is live, and the phone can list which app used it last.
A ten-minute audit
Open the privacy section of your phone's settings, which lists apps by permission rather than the other way around. Start with location and look for anything set to always. Few apps have a case for it beyond navigation, a tracker for lost items and a weather alert. Go through microphone, camera and contacts the same way. Delete apps you have not opened in six months, and turn on the setting that strips permissions from unused apps automatically. The reason to bother is commercial: location data gathered by ordinary apps is sold to brokers, and a trail that ends at the same address every night is not anonymous.
Sharing your location with people
Continuous sharing with a partner or family is a reasonable choice, provided it is a choice you remember making. Review the list in your phone's location-sharing feature, in your maps app and in any messaging app, and end anything stale. For a meetup or a ride home, use a share that expires in an hour or at arrival. Phones also now warn you when an unfamiliar tracking tag is moving with you. Do not dismiss that alert.
Photos carry coordinates
A photo taken with location turned on stores the exact coordinates inside the file. Large social platforms strip them on upload, but email, text attachments and direct file transfers often do not. The share sheet on most phones has an option to remove location before sending.
Tip Repeat the audit after every major system update, since updates add new permission types and occasionally reset old choices.
