Smartphone Privacy Checklist: 15 Settings to Change Today

Your phone has a reasonably detailed picture of your day: where you slept, where you work, which apps you opened on the train, and roughly who you talked to. That is not a conspiracy — it is the default behaviour of a modern mobile operating system, and defaults are designed for convenience, not for your privacy. The good news is that most of the exposure sits in a dozen settings screens you have probably never opened. The fifteen below take about twenty minutes to work through, and every one of them can be reversed if something stops working the way you want.

Start with location, the most revealing data on the device

Location history is the data that hurts most when it leaks, because you cannot change it afterwards. It reveals patterns: home, workplace, clinic, place of worship.

1. Audit location app by app. On iOS, open Settings, then Privacy & Security, then Location Services. Do not simply flick the master switch off — that breaks maps and weather. Scroll the app list and decide deliberately: "While Using" or "Never" for almost everything, and "Always" only for a navigation app you genuinely rely on in the background. While you are in each app's screen, turn off Precise Location for anything that only needs a city.

On Android, go to Settings, then Location, then App location permissions, and work down the list the same way. "Allowed all the time" should be rare.

2. Clear the system-level history. iOS: Settings > Privacy & Security > Location Services > System Services > Significant Locations. Turn it off, then clear the stored list. Android users should open Google Maps, tap the profile picture, then Timeline (or Location History on older versions), switch it off and delete existing entries.

3. Disable Wi-Fi and Bluetooth scanning (Android). Under Location > Location services, switch off both scanning options. They let apps estimate your position from nearby networks even when GPS is off.

Trim app permissions to what each app actually does

Permission prompts arrive when you are busy, so most of us tap Allow and move on. Now is the moment to undo that.

• 4. Camera and microphone. iOS: Privacy & Security > Camera, then the same for Microphone. Android: Privacy > Permission manager. A note-taking or shopping app has no business listening.
• 5. Contacts and files. Same screens, different entries. Contacts access is rarely needed outside messaging and calling apps.
• 6. Photos. On iOS, choose Selected Photos rather than handing an app your entire library. Recent Android versions offer the same limited access — take it.
• 7. Check who has been busy. iOS keeps an App Privacy Report (Privacy & Security > App Privacy Report) showing which apps touched sensors in the past week. Android's Privacy Dashboard shows the same on a timeline. Make it a monthly glance.

Turn off the advertising ID

Apps do not need your real name to follow you. A resettable identifier is enough to link activity across apps and assemble a profile.

1. 8. iOS: Settings > Privacy & Security > Tracking, then turn off Allow Apps to Request to Track. That answers no to every cross-app tracking prompt at once.
2. 9. Android: Settings > Privacy > Ads. Choose Delete advertising ID if your version offers it, otherwise reset it. Apps then receive a string of zeros instead of a stable identifier.
3. 10. Your Google account: open account settings, go to Data & privacy, and turn off Ad personalization. Consider pausing Web & App Activity too, since it feeds much of that targeting.

Make the browser leak less

The browser is where tracking gets most aggressive, because cookies travel between sites.

11. Block third-party cookies. In Safari, Chrome or Edge, enable the setting that blocks them. Expect the occasional broken login or embedded widget — that is the cost of the trade.

12. Add tracking protection. Firefox and Brave block known trackers by default, and Safari has cross-site tracking prevention built in. On iOS, iCloud Private Relay, which comes with a paid iCloud plan, hides your IP address from most sites in Safari.

13. Consider private DNS (Android). Settings > Network & internet > Private DNS lets you point resolution at a provider that filters known trackers. It is optional, and it does move your DNS queries from your carrier to that provider, so choose one you have reason to trust.

While you are in there: turn off search suggestions, clear cookies on exit, and stop letting the browser store passwords. A dedicated password manager does that job better.

Close the quieter gaps

14. Hide lock screen content. iOS: Face ID & Passcode > Show Previews > When Unlocked. Android: Notifications > Lock screen > hide sensitive content. Message previews on a locked screen are a gift to anyone who picks up your phone.

15. Cut the background signals. Turn off auto-join for open Wi-Fi networks, forget networks you no longer use, and switch Bluetooth off when headphones or a watch are not connected. Then review the devices signed into your main accounts, remove anything you do not recognise, and enable two-factor authentication wherever it is offered.

Do it once, then revisit every few months

Work through the list in one sitting — a coffee break is enough — and the changes will hold. Apps re-ask for permissions after updates, and new installs arrive with generous defaults, so set a reminder every three months to skim the permission manager and the privacy report. If a banking, health or work app breaks after a change, restore that one permission rather than abandoning the whole exercise. And if your phone is managed by an employer, check with IT before altering settings that device management controls, because some of them are enforced for good reason.

Photo: Towfiqu barbhuiya / Pexels