Skip to content
ScanMyPrivacy
Menu

Privacy and leak tests

Full Privacy ScanDNS Leak TestWebRTC Leak TestBrowser Fingerprint TestAm I Using a VPN?HTTP Headers ViewerUser Agent CheckerOpen Port Checker

Online safety assistant

Website Safety CheckerSuspicious Link CheckerScam and Phishing Message CheckerBrowser Security GuideMobile App Safety CheckPersonal Security Checkup

IP and network lookups

IP LookupMy IP LocationWhat Is My Public IP?What Is My IPv6 Address?Reverse DNS LookupDNS Lookup
Online safety Guides API About

Mobile safety

App permissions explained for Android and iPhone

Updated · 2 min read

Written by the ScanMyPrivacy team. How we write and check guides · Report a correction

Try it yourself:Mobile App Safety CheckPersonal Security CheckupBrowser Security Guide

Permissions decide what an app can reach on your phone. Most apps need a few to work. A torch app that wants your contacts, or a game that wants your microphone, deserves a second look. The rule of thumb is simple: give only what the app needs for the thing you are using it for.

What the main permissions allow

  • Location: where you are. "While using the app" is usually enough; "always" lets it track you in the background.
  • Camera and microphone: take photos, record video or sound. Needed for calls and photos; rarely for anything else.
  • Contacts: read your address book, which includes other people's details.
  • Photos and files: access to your gallery or storage. Choose selected photos when asked.
  • SMS and call logs: sensitive; read messages, which can include one-time codes. Few apps need these.
  • Accessibility: on Android this can read the screen and tap for you. Scam and spyware apps abuse it, so grant it only to apps you trust deeply.
  • Notifications and install other apps: notification spam and unknown installs can both lead to harm.

Red flags

  • A simple tool asking for many unrelated permissions.
  • An app from outside the official store, or a "modded" version of a paid app.
  • A message or call telling you to install an app, especially for "support", banking or a prize.
  • Requests for accessibility or device admin rights from an unfamiliar app.

Use the mobile app safety guide to check an app's category and the permissions it asks for.

Review permissions on Android

Steps checked against Google's Android Help on 30 October 2026; menu names vary by phone maker and version.

  1. By permission: Settings, Security & privacy, Privacy, Permission manager. Choose a type such as Location or Camera to see which apps have it, and tap an app to change it.
  2. By app: Settings, Apps, choose the app, then Permissions. Use "Allow only while using the app" or "Ask every time" for location, camera and microphone.
  3. Under the app's "Unused app settings", turn on "Pause app activity if unused" so permissions are removed from apps you stop opening.

Review permissions on iPhone

Settings, then Privacy & Security. Choose a category such as Location Services, Photos, Camera or Microphone to see which apps have access, and change each one. Set location to "While Using" or "Never", and share "Selected Photos" instead of the whole library where offered. Turn on App Privacy Report (iOS 15.2 or later) to see, for the past 7 days, which apps used sensors and which domains they contacted. Apple's guide for your iOS version lists the exact choices.

No website, including this one, can see which apps are installed on your phone. You review them on the phone itself.

Good habits

  1. Install from the official store (Google Play or the App Store) and check the developer, reviews and number of downloads.
  2. Say no first. Allow it later if a feature really needs it.
  3. Review permissions every few months and delete unused apps.
  4. Keep your phone updated, which patches known flaws.

Official stores reduce risk but do not remove it. Our guidance is general and a menu name may differ on your version.

Tools that can help

Antivirus and device protection

What it does: Scan for known malware and warn about dangerous downloads. What it does not do: Stop scams, phishing or fake support calls, which trick you instead of attacking the device. Built-in protection is enough for many people; a paid suite is optional.

  • Microsoft DefenderBuilt inNo commissionBuilt into Windows. Keep it on and updated before paying for anything else. Visit site
  • Google Play ProtectBuilt inNo commissionBuilt into Android phones with Google Play. Scans apps and can warn about harmful ones. Visit site

We list free and built-in options first. How we choose.

Keep reading

Fake virus warnings and malicious popups: what to doPopups claiming your device is infected are scams. Learn to spot them, close them safely and clean up notification and extension settings.Strong passwords and two-step verification, made simpleSecure your accounts: unique passwords with a password manager, two-step verification starting with email, and how to end a stolen session.What to do after an online fraud in IndiaPaid a scammer, shared an OTP or clicked a fake link? A first-hour checklist for India: bank, 1930 helpline, cybercrime portal, evidence and Chakshu.What your browser fingerprint reveals about youA browser fingerprint is a mix of settings sites read without cookies. See what it includes, how identifying it is and which steps reduce it.Is public Wi-Fi safe? What actually protects youPublic Wi-Fi is less risky than it used to be, but not risk-free. Learn what other people on the network can see, which habits matter, and when a VPN helps.How to spot fake login pages and lookalike domainsLearn how to read a web address, catch lookalike domains and fake login pages, and what to do when a page asks for your password after a message or ad.

Frequently asked questions

Is it safe to give an app location access?

For mapping, delivery or weather, yes while using the app. Avoid "always" unless the app truly needs it.

Can an app listen to me through the microphone?

Only if you gave it microphone permission, and phones show an indicator when it is in use. Remove it from apps that do not need it.

What should I do if I think an app is malicious?

Uninstall it, change passwords for accounts used on it, and check your bank and email for unfamiliar activity.