7 Privacy Settings You Should Change on Your Phone Right Now
Your Phone Knows More About You Than Your Best Friend Does
Every app you install, every location you visit, every word you say near your phone — all of it can be collected, packaged, and sold to advertisers before you've even finished your morning coffee. The uncomfortable truth is that both iOS and Android ship with settings that favor data collection over your privacy, and most people never touch them.
The good news? A few well-placed toggles can dramatically shrink your exposure. These aren't obscure developer options — they're real settings buried just deep enough that most people never find them. Here's exactly what to change, and why each one actually matters.
1. Revoke Always-On Location Access from Apps That Don't Deserve It
This is the single biggest privacy leak on most phones. Dozens of apps request "Always" location access — meaning they track your GPS coordinates continuously, even when you're not using them. Weather apps. Food delivery apps. That flashlight app someone installed in 2019 and forgot about.
On iPhone (iOS 17+): Go to Settings → Privacy & Security → Location Services. Tap each app and change anything set to "Always" to "While Using the App" or "Never." Look especially hard at social media apps, shopping apps, and anything you rarely open.
On Android (13+): Settings → Location → App permissions. Same logic — find every app with "Allow all the time" and downgrade it. Most apps function perfectly with "While using the app."
Why it matters: Location data over time builds a precise map of where you live, work, worship, seek medical care, and who you spend time with. This data is legally sold to data brokers, insurers, and law enforcement without a warrant in many jurisdictions.
2. Kill the Ad Tracking Identifier
Both Apple and Google assign your device a unique advertising ID — a string of characters that lets ad networks track your behavior across every app you use. It's basically a license plate for your digital life, and it follows you everywhere unless you do something about it.
On iPhone: Settings → Privacy & Security → Tracking → toggle off "Allow Apps to Request to Track." Also go to Settings → Privacy & Security → Apple Advertising → toggle off "Personalized Ads."
On Android: Settings → Privacy → Ads → tap "Delete advertising ID" (Android 12+). On older Android, you'll find an option to "Opt out of Ads Personalization" — enable it. The nuclear option on Android 12+ actually deletes the ID entirely, replacing it with a string of zeros that ad networks can't use.
The result isn't that you see fewer ads. You'll still see ads. But they won't be targeted based on everything you've ever searched, purchased, or said near your phone. That's a meaningful difference.
3. Audit Microphone and Camera Permissions
Yes, apps can access your microphone in ways you haven't explicitly approved for that specific context. No, we're not talking conspiracy theories — this is documented behavior from apps that use "audio fingerprinting" to identify TV shows playing nearby, or that activate the mic for voice search features you've never used.
On iPhone: Settings → Privacy & Security → Microphone (and separately, Camera). You'll see every app that has ever been granted access. Revoke access from anything you don't actively use for voice or video.
On Android: Settings → Privacy → Permission Manager → Microphone (and Camera). Same process. Be ruthless — a recipe app has zero legitimate reason to access your microphone.
iOS 14+ also added a green dot indicator in the status bar that lights up when the camera or microphone is active. If you see it when you're not in a call or recording something, investigate immediately under Settings → Privacy & Security → Microphone (you'll see which app last used it).
4. Lock Down Your Lock Screen
Your lock screen might be leaking more than you realize. Notification previews, Siri responses, and control center access can all expose sensitive information — messages, emails, banking alerts — to anyone who picks up your phone.
On iPhone: Settings → Face ID & Passcode (or Touch ID & Passcode) → scroll to "Allow Access When Locked." Turn off Control Center, Notification Center, and Return Missed Calls unless you have a specific reason to keep them on. Then go to Settings → Notifications → Show Previews → change to "When Unlocked."
On Android: Settings → Privacy → Notifications on lock screen → set to "Hide silent conversations and notifications" or "Don't show notifications at all." Also check Settings → Display → Lock screen and disable any sensitive widget shortcuts.
This matters most if your phone is ever lost or stolen, or if you're in a work environment where coworkers can see your screen. It's also your first line of defense against shoulder-surfing.
5. Turn Off Personalized Search and Browsing History Sync
Your phone's default browser — Safari on iPhone, Chrome on most Android devices — is almost certainly syncing your browsing history back to Apple or Google's servers. Safari's "Search & Privacy" settings and Chrome's sync features are worth revisiting even if you already use private browsing occasionally.
On iPhone (Safari): Settings → Safari → turn off "Prevent Cross-Site Tracking" (it should actually be ON — make sure it is). Also toggle on "Hide IP Address" and set it to "From Trackers and Websites." Under Privacy Preserving Ad Measurement, you can turn this off — it still feeds ad measurement data to websites, just in a supposedly anonymized way.
On Android (Chrome): Chrome → three-dot menu → Settings → Privacy and Security → clear browsing data. More importantly: Settings → Google → Manage your Google account → Data & Privacy — from here you can pause Web & App Activity. This stops Google from associating your searches with your account.
Consider switching to Firefox with uBlock Origin on Android or Firefox Focus on iPhone as your daily driver. The difference in tracker blocking compared to default browsers is substantial.
6. Review What's Syncing to iCloud or Google Account
Cloud backup is genuinely useful. But do you know exactly what's being uploaded? Health data, contacts, call logs, browser history, photos with embedded GPS coordinates, app data — all of it may be sitting on servers you don't control.
On iPhone: Settings → [Your Name] → iCloud → iCloud Drive → Apps Syncing to iCloud. Scroll through and disable sync for apps that don't need it. Pay special attention to Health, Wallet, and any communication apps.
On Android: Settings → Accounts → Google → Account Sync. Here you can toggle off contact sync, calendar sync, Chrome history sync, and more on a granular level without losing local functionality.
The goal isn't to disable backup entirely — it's to be intentional about which data lives in the cloud versus stays on-device only.
7. Enable Two-Factor Authentication and Check Your Trusted Devices
This one is slightly different — it's not a privacy toggle, it's an access control setting that most people set up once and never revisit. The problem: old phones, old tablets, and old devices where you've logged in remain "trusted" indefinitely, which means a lost or sold device could still be used to bypass 2FA on your account.
On iPhone: Settings → [Your Name] → scroll down to your list of trusted devices. Tap any device you no longer own or use → "Remove from Account."
On Android/Google Account: Go to myaccount.google.com/security → Your Devices. Review every device listed and remove anything you don't recognize or no longer own. While you're there, check "Third-party apps with account access" and revoke anything you don't actively use.
For 2FA itself, if you're using SMS-based codes, consider switching to an authenticator app like Aegis (Android) or Raivo (iOS). SMS codes are vulnerable to SIM-swapping attacks; app-based TOTP codes are not.
The Bigger Picture
None of these changes require technical expertise or a custom ROM. They're available to anyone who knows where to look, and collectively they close off the most common channels through which your data leaks out of your device without your meaningful consent.
Set aside 20 minutes this week. Go through these seven settings on your own phone. Then check the phones of anyone you care about — parents and older relatives especially tend to have years of unreviewed permissions accumulating in the background.
Privacy isn't an all-or-nothing proposition. Every permission you revoke, every tracker you block, every sync you disable is one less vector for your personal data to end up somewhere you didn't intend. Start here. Start today.