Your phone shipped with settings that favor data collection over privacy. Not by accident. The defaults were chosen deliberately — by companies whose business models depend on knowing where you go, what you do, and which apps you use.
Most people never change them. Not because they don't care, but because they don't know the settings exist or where to find them. Ten minutes changes that.
This article covers two things. First, the OS-level settings worth changing once on any iPhone or Android — the foundation. Second, a method for resetting your app permissions from scratch so that nothing has access you didn't consciously grant.
Both are practical. Neither requires technical knowledge. A search bar in your Settings app is the only tool you need.
Every permission an app holds is a standing invitation to collect data. Location set to Always means an app knows where you are whether you're using it or not. Microphone access granted once stays granted until you revoke it. Most people have dozens of apps holding permissions they granted during setup and never thought about again — including apps they barely use anymore.
The goal here isn't a perfect configuration you set once and forget. It's developing the habit of asking one question every time an app requests something: does this app need this permission for what I'm doing right now? A bank app checking your balance doesn't need your camera. A weather app doesn't need your location constantly. Task-level consent is more honest than app-level consent, and it puts you in control of each decision instead of making a blanket grant you'll never revisit.
Privacy isn't a settings page you visit once. It's a series of small decisions that compound over time.
These are one-time changes to your phone's operating system settings. They apply across all apps. Use the search bar in your Settings app — type the keyword, find the setting on your own device, see the exact path your phone uses. This works on every manufacturer's version of Android and on iPhone.
Search term: "ads" or "advertising ID"
Your phone has a unique advertising identifier — a string of characters that follows you across every app that uses it. Ad networks use it to build a profile of your behavior and serve targeted ads. You can delete it entirely.
On Android, find the Ads setting and tap Delete advertising ID. Once deleted, apps receive a string of zeros instead of your ID — the tracking chain breaks.
On iPhone, search "tracking" and open Tracking under Privacy & Security. Turn off Allow Apps to Request to Track. This triggers Apple's App Tracking Transparency framework — apps are blocked from asking for permission to track you across other companies' apps and websites. Studies show 95% of US users opt out when they know this setting exists.
Do this one first. It's the single highest-impact change you can make in under a minute.
Search term: "location"
Open Location settings and look at every app in the list. You're looking for anything set to Always. Always means the app knows where you are continuously — in the background, whether you're using it or not.
For most apps, Always is unnecessary. Change each one to Ask Every Time. Not "While Using" — Ask Every Time. Here's why: "While Using" is still a blanket grant for every session. "Ask Every Time" means the app has to ask each time it wants your location, and you decide in context whether that makes sense right now. A navigation app gets location when you're navigating. It doesn't get it when you're checking yesterday's route history.
The exceptions are few. Find My (iPhone) and equivalent tracking apps legitimately need background location. Everything else should earn it request by request.
Search term: "camera" then "microphone"
Review which apps have access. The question for each one is the same: does this app ever need my camera or microphone? If yes — does it need it right now, or only for specific tasks?
Set anything that doesn't have an obvious ongoing need to Ask Every Time. Social apps, shopping apps, productivity apps — most of them need camera only when you deliberately choose to use it. Asking every time keeps that choice visible.
Search term: "privacy dashboard"
If your phone has one, use it. Android 12 and later includes a Privacy Dashboard that shows a timeline of which apps accessed your location, camera, and microphone over the past 24 hours. Not all manufacturers surface it the same way — search for it and see what your phone shows.
iPhone doesn't have a direct equivalent, but the permission lists under Privacy & Security show recent access indicators next to app names.
What you're looking for: apps accessing sensitive data at unexpected times. A flashlight app that accessed your microphone at 2am has no legitimate reason to do so. If you see something that doesn't make sense, revoke the permission immediately.
Changing settings one by one is useful. Starting from scratch is more thorough.
The method: go through every permission category — Location, Camera, Microphone, Contacts, Calendar, and any others you find — and deny access for every app. All of them. Then use your phone normally.
Every time an app needs a permission it no longer has, it will ask. That prompt is a decision point. You're standing in front of the door deciding whether to let it in, with the specific reason visible: "MyApp would like access to your camera." You decide yes or no in context, for the task you're actually doing.
Apps you'd forgotten you installed will never prompt you. Their permissions stay revoked permanently without any action on your part. Apps you use regularly will get permissions back — but only the ones they actually need, granted at the moment they need them.
Search term: "permissions" or "permission manager"
On Android, Permission Manager gives you a view organized by permission type — all apps with location access in one list, all apps with microphone access in another. That's the most efficient place to do a full reset.
On iPhone, go through each category under Privacy & Security individually — Location Services, Camera, Microphone, Contacts, and so on.
When an app prompts you after the reset, you don't have to grant what it asks for. A bank app asking for camera access during a balance check doesn't need it. Deny it. When you're making a mobile deposit, it will ask again — grant it then.
The settings and the reset are a starting point. What compounds over time is the behavior.
Every app permission prompt is a moment of actual control. Most people tap Allow without reading it. The habit worth building is the opposite — read the prompt, consider the task, decide deliberately. It takes two seconds. Over time it becomes automatic.
The same logic extends beyond permissions. Going directly to a website instead of clicking a link in an email. Searching a product by name instead of tapping an ad. Stripping metadata before sharing a photo. None of these are difficult. Together they add up to a meaningfully smaller footprint than the person who just taps through every default.
You can't disappear from the data economy. But you can make deliberate decisions about what you hand over, one prompt at a time.
These settings are worth revisiting after every major OS update. Manufacturers and apps occasionally reset permissions or introduce new data-sharing defaults with updates. A quick search through your permission manager twice a year takes five minutes and catches anything that quietly changed.
Search "location" in your Settings. Find any app set to Always. Change it to Ask Every Time.
That's the first decision. Every one after it follows the same logic.
See what your phone was sharing before you changed this — Your Phone Knows Where You've Been