The first thing to know is that apps determine a device’s location. Navigators and marketplaces rely on location for smoother experiences, so users don’t have to type in city or address every time. Some photo editors and other apps with unknown creators may also request geolocation access.
Apps that don’t require location should not be granted these permissions.
On Android devices, locate the app on the home screen, long-press its icon, and in the window that appears choose Details or tap the info icon. In the Permissions section, revoke location access.
On iPhone, open Settings, then Privacy, then Location Services. Select the app and prevent it from tracking geolocation.
For apps that still have access, it helps to set the accuracy level. In iOS this is done in the same section by toggling Exact Location on or off. Android offers the same option in its permissions area.
Important addresses
To keep Apple and Google from knowing favorite places, home, and work addresses, turn off location tracking.
On iOS, go to Settings, Privacy, Location Services, System Services, and then Important Locations. After clearing activity history, switch off tracking.
Android users may need a few more taps. In Google Maps, go to History or Chronology, then Location History. To clear history, tap the trash can icon in Chronology.
Access to photos and videos
Most people don’t keep dangerous images in their gallery, but it’s wise to protect personal data and restrict apps from accessing the gallery. Games and other entertainment apps may stop working if access is blocked.
On iOS, open Settings, Privacy, Photos. Choose the app and either deny access entirely or allow access only to selected images.
On Android, press and hold the app icon, go to Permissions, and deny storage access for media files.
metadata
Often, when users share photos or videos, they unknowingly expose metadata such as creation date and location, or device information. Attackers can use this data to infer sensitive details, like travel plans or home presence.
Use the app to disable metadata transfer on iPhone. It not only clears metadata but can also fix it as needed. Android provides similar functionality via an app such as Photo EXIF Editor.
Camera and microphone
Turning off the camera and microphone on a smartphone is a prudent precaution, especially when handling sensitive information.
On iOS, open Settings, Privacy, Camera or Microphone, and select apps to prevent access to these sensors.
On Android, select the app on the home screen, visit App Details, then Permissions, and revoke camera and microphone access. Android 12 offers a quick system-level toggle to disable the mic and camera from the quick settings panel on devices running stock Android.
Other permissions
To boost security, review all apps and disable any unnecessary permissions. For instance, deny SMS reading, contacts access, or call recording where possible. This helps prevent automatic entry of one-time codes or sensitive messages from apps that do not require them.
App Lock
Even with a device password or biometric protection, an extra layer of security can be valuable. Many Android manufacturers include built-in app lock utilities that let users set a separate password or code for individual apps.
For example, Xiaomi offers a Security app that supports graphic, numeric, or alphanumeric passwords to open apps. This adds a strong hurdle for anyone trying to access a protected app, even if they obtain the device password.
iPhone users can’t replicate this with the same hardware feature, but there are creative methods. The Shortcuts app can automate a lock when a chosen app opens. Create a new automation, select the action when the app is opened, set a one-second timer, and turn off Ask Before Running. Then in the Clock app set the Stop action to end the timer. After that, launching the app requires the passcode or biometric unlock to continue.
remote removal
Losing a phone happens to many. Both Android and iOS provide ways to wipe the device remotely.
Android users should sign in to Google Find Device with the same Google account and select the lost device, then choose Delete all data on the device. Note that this removes the device from the map and logs out the account, making tracking impossible.
For iPhone, sign in with the same Apple ID, open iCloud, go to Find My iPhone, select the device under Devices, and choose Delete This Device.