Key Takeaways
Summary
18 items · 20–45 minutes
Why Default Settings Aren't Designed With Privacy First
When you set up a new phone, the defaults are generally tuned for convenience and maximum app functionality — not privacy. Apps request permissions broadly, location services stay on continuously, and diagnostic data flows to developers without much notice to users. Most people tap through setup screens quickly and never revisit these choices.
This checklist walks through the settings worth auditing on both Android and iOS. You don't need to be technically minded to do this — just patient and methodical. If you're also thinking about privacy across your connected devices at home, the Smart Home Privacy framework covers similar principles for a different context.
Location Permissions
Camera, Microphone & Contacts
Ad Tracking & Personalization
Diagnostics & Usage Data Sharing
Lock Screen & Biometric Access
Cloud Sync & Backup Permissions
What You'll Need Before You Start
No special tools are required — just your phone, about 20 to 45 minutes, and a willingness to tap through a few nested menus. Understanding the basics of how Android and iOS differ in daily use can help frame what you find; the Android vs. iOS comparison is a useful reference if you've recently switched platforms.
Your Phone's Settings App
The primary interface for all permission and privacy controls on both Android and iOS — no download required.
iOS App Privacy Report
Built-in iOS tool that logs how often apps access sensitive data like location, camera, and microphone over a 7-day window.
Google Account Permissions Dashboard
Web-based dashboard at myaccount.google.com that shows which third-party apps have access to your Google account data.
Apple ID Privacy Settings (appleid.apple.com)
Web portal where you can review and revoke third-party app access linked to your Apple ID.
Revoking Permissions Can Break App Features
Restricting a permission doesn't delete your data from a developer's servers — it only prevents new data collection going forward. Some app functions may stop working when permissions are revoked; for example, removing location access from a delivery app will prevent address auto-detection. Evaluate the trade-off for each app individually rather than applying a blanket approach.
After the Audit: Keeping Settings Where You Left Them
Privacy settings don't always stay put. Major OS updates occasionally introduce new data-sharing toggles set to opt-in by default. App updates can request new permissions without announcing it prominently. A quick re-check every few months — especially after a significant OS upgrade — is a reasonable habit. If you're preparing to hand a phone off to someone else, the guide on preparing a phone before selling covers the full reset process, which goes further than a permission audit alone.
OS Updates Can Reset Your Choices
Both Android and iOS occasionally introduce new privacy features or data-sharing options during major updates — and these often default to the more permissive setting. After any significant OS upgrade, it's worth running through this checklist again. This is especially important if you use apps that handle financial, health, or communications data.