Summary
18 items · 20–40 minutes
Why Your Default Settings Deserve a Second Look
When you set up a new phone, most privacy settings default to whatever the manufacturer or carrier chose — not necessarily what's best for you. Over time, as you install apps and grant permissions in the moment, those choices pile up in ways that are easy to forget about. A quick, structured audit takes less than an hour and can meaningfully reduce how much of your daily life gets shared with advertisers, data brokers, and apps you rarely open anymore.
This checklist covers the four areas where most people have the most exposure: location access, ad tracking, lock screen visibility, and app data sharing. It applies to both iPhone (iOS) and Android devices, with notes where the steps differ. For a broader look at account and device security beyond just privacy settings, see The Everyday Person's Guide to Smartphone Security.
Your phone's Settings app
The built-in hub for all privacy and permission controls on both iOS and Android.
Privacy Dashboard (Android) or Privacy section (iOS)
Shows a timeline of which apps accessed sensitive data like your location, microphone, and camera.
Google Account settings (myaccount.google.com)
Lets Android users manage Location History, ad personalization, and data stored by Google services.
How to Use This Checklist
Work through the groups in order. Each item is labeled must (do this regardless), should (strongly recommended for most people), or nice to have (worthwhile if you have a few extra minutes). You don't need any technical background — just your phone and access to its Settings app.
If you find an app that has permissions it shouldn't need, the detailed breakdown in App Permissions That Are Worth a Second Look explains exactly which ones deserve scrutiny and why.
Location Access
Ad Tracking
Lock Screen & Notification Exposure
App Data Sharing & Permissions Audit
A Few Things to Know Before You Start
These Are System Settings, Not App Settings
Turning off a permission in your phone's Settings app overrides the app — the app cannot re-enable it without your action. However, each app also has its own in-app privacy settings (for things like email preferences or profile visibility) that your phone's Settings app does not control. Work through both levels for the most complete coverage. For social media in particular, check each app's own privacy menu after completing this checklist.
Revoking a permission doesn't usually break an app — it may just limit one feature. For example, pulling location access from a weather app means you'll type your city manually instead of getting automatic local forecasts. That's a reasonable trade-off for many people. If something stops working the way you expect, you can always re-enable it.
Settings menus vary by phone model and operating system version. If a menu path described here doesn't match exactly what you see, search for the setting name using the search bar at the top of your Settings app — both iOS and Android support this.
Don't Revoke Permissions Blindly for Safety Apps
Emergency and medical alert apps may genuinely need "Always On" location access to function correctly in a crisis. Before revoking location from any app, consider its purpose. If you use a medical alert, fall detection, or family safety app, review those permissions carefully rather than applying a blanket revoke.
Once you've worked through this checklist, consider doing it again every six months or after installing a batch of new apps. Permissions accumulate quietly. For a calendar-friendly version of this habit, The Privacy Settings Check You Should Do at Least Once a Year walks through a broader routine that pairs well with this phone-specific audit.
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.