Reviewing app permissions means checking which apps can use your camera, microphone, location, photos, contacts, and other data — then turning off access that is not needed. Google’s Android Help and Apple’s iPhone User Guide both let you change permissions per app or by permission type in Settings.

This guide is about privacy permissions on the phone you already own, not a full Play Protect malware scan and not parental Screen Time / Family Link setup. No purchase required.

1. Why a quarterly permissions check helps

  1. Apps sometimes ask for camera, mic, or location “for features” you never use.
  2. Unused apps can keep sensitive access until you revoke it (Android can pause unused apps).
  3. Over-permissioned flashlight, wallpaper, or “cleaner” apps are a common household risk pattern.
  4. After installing kids’ games or shopping apps, permissions drift — a 10-minute review resets the baseline.

2. Android — change permissions (Google Help)

  1. Open Settings → Apps, pick the app (or See all apps).
  2. Tap Permissions, then tap a permission and choose Allow or Don’t allow.
  3. For location, camera, and microphone, prefer Allow only while using the app or Ask every time when available; avoid All the time location unless you truly need it.
  4. Or open Settings → Security & privacy → Privacy → Permission manager, pick a permission type (Camera, Location, Microphone, Photos…), and audit every app on the list.
  5. Under an app’s unused settings, turn on Pause app activity if unused so idle apps lose permissions automatically.
  6. Optional hard stop: Privacy controls to disable Camera access or Microphone access device-wide.
  7. Still run Play Protect if an app behaves oddly.

3. iPhone — control access (Apple Support)

  1. Go to Settings → Privacy & Security.
  2. Tap a category (Location Services, Camera, Microphone, Photos, Contacts, Calendars, etc.).
  3. Turn access off for any app that does not need it.
  4. Open App Privacy Report (same Privacy & Security screen) to see how apps used the permissions you granted and their network activity.
  5. Revisit after installing new apps; the first prompt is not the last chance to change your mind.

4. Household rules (buy-nothing)

  1. Flashlight, QR, and wallpaper apps almost never need Contacts or full Files access — deny.
  2. Banking apps may need camera for deposits; they do not need your full photo library forever — tighten Photos to limited access when the OS allows.
  3. Shared family phones: pair this review with Family Link or Screen Time.
  4. Before selling a phone, revoke cloud sessions and wipe the device.
  5. Smart-home companion apps: change default passwords too — smart home default passwords.

FAQ

How do I review app permissions on Android?

Settings → Apps → [app] → Permissions, or Permission manager by type (Google Help).

How do I review app permissions on iPhone?

Settings → Privacy & Security → category → toggle per app; use App Privacy Report for usage (Apple).

Is this the same as scanning for malware?

No. Permissions are privacy access controls; malware scanning is separate (Play Protect).

Do I need a paid security app to manage permissions?

No. Built-in Settings are enough for this task. Buy-nothing is valid.

What should I revoke first?

Camera, Microphone, Location “all the time,” and Contacts on apps that are not chat/maps/camera tools. Also see the home privacy checklist.

Permission reviews do not require paid antivirus. Microsoft Defender (on Windows PCs in the household) and built-in phone tools are a valid buy-nothing stack. If you want multi-device paid protection, use only these on-site paid links: TotalAV (paid link), Norton (paid link), Bitdefender (paid link), McAfee (paid link), Avast (paid link).