Android Privacy Settings Worth Changing Today

Modern Android phones include strong privacy controls, but many of them are designed to balance protection with convenience rather than automatically choosing the most private option.

Applications may retain access to precise location, contacts, photographs, the microphone or nearby devices long after you have stopped using the feature that originally required it. Notifications can reveal private information on the Lock Screen, advertising systems may use activity to personalise promotions and an unlocked phone can expose far more than its purchase price if it is stolen.

You do not need to disable every service or turn your smartphone into an unusable device. A better approach is to review the settings that create the greatest exposure and give applications only the access they genuinely need.

Menu names vary between Google Pixel, Samsung Galaxy, Motorola, Xiaomi and other Android phones, but the controls below are available on many current devices.

1. Open the Privacy Dashboard

The Privacy Dashboard is one of the most useful places to begin because it shows which applications recently accessed sensitive information.

Open:

Settings > Security and privacy > Privacy > Privacy dashboard

On some phones, the route may simply be:

Settings > Privacy > Privacy dashboard

Select a category such as:

• Location
• Camera
• Microphone
• Contacts
• Photos and videos
• Nearby devices

You can then see which apps used that permission and change their access directly. Google describes the Privacy Dashboard as a way to review recent permission activity and update an app’s permission from the same screen. 

Recent access is not automatically suspicious. A navigation app may use location during a journey, while a video-calling service may access the camera and microphone during a meeting.

Investigate access that does not match what you were doing at the time.

2. Review Every App With Location Access

Location is one of the most valuable types of information stored on a phone. It can reveal where you live, where you work, which businesses you visit and when you are away from home.

Open:

Settings > Security and privacy > Privacy > Permission manager > Location

Review applications under categories such as:

• Allowed all the time
• Allowed only while in use
• Ask every time
• Not allowed

Very few consumer apps need permanent background location.

Consider changing unnecessary Allow all the time permissions to:

• Allow only while using the app
• Ask every time
• Don’t allow

Google allows Android users to manage permissions by category through Permission Manager rather than opening every application separately. 

Legitimate examples of background access may include a deliberately configured family-location service, lost-device protection or certain journey-tracking and safety applications.

A weather app, restaurant service or ordinary shopping app normally does not need to monitor your exact position continuously.

3. Choose Approximate Location Where It Is Enough

Android can provide either approximate or precise location to compatible apps.

Approximate location normally identifies a broader area, while precise access can identify the phone’s exact position much more closely. 

Approximate location is often sufficient for:

• Local weather
• Regional news
• Shop availability
• Local search results
• Content recommendations

Precise location is more appropriate for:

• Turn-by-turn navigation
• Taxi and ride-hailing services
• Food or parcel delivery
• Emergency tools
• Finding a lost phone

Open an app’s location permission and disable Use precise location when its purpose does not require it.

Start with the narrower option. You can enable precise access later when a particular feature genuinely needs it.

4. Restrict Camera and Microphone Permissions

Camera and microphone access should generally be limited to applications whose functions clearly require them.

Open Permission Manager and inspect both categories.

Reasonable examples include:

• Camera apps
• Video-conferencing platforms
• Voice recorders
• Messaging apps with voice notes
• QR-code scanners
• Translation tools

Question access for:

• Wallpaper apps
• Basic calculators
• Torch applications
• Simple games without voice features
• Unknown utility apps
• Shopping apps that never scan anything

For most applications, choose Allow only while using the app rather than unrestricted access.

Android also displays visual privacy indicators when the camera or microphone is active. When an indicator appears unexpectedly, open the Privacy Dashboard and review the recent timeline.

5. Add Camera and Microphone Controls to Quick Settings

Many Android phones provide device-wide switches that temporarily block all applications from using the camera or microphone.

Swipe down twice from the top of the screen and look for:

• Camera access
• Microphone access

When the tiles are not visible, use the Quick Settings edit option to add them.

These switches are useful during:

• Confidential meetings
• Private conversations
• Travel
• Troubleshooting an unfamiliar app
• Situations where you want an immediate privacy barrier

Google’s Pixel privacy controls include device-wide camera and microphone access switches alongside Permission Manager and the Privacy Dashboard. 

Remember to restore access before joining a call or attempting to record something.

6. Limit Photo Access to Selected Images

A social-media app, marketplace or document service may request access to the whole photo library merely so that you can upload one image.

Where Android offers the choice, select:

Select photos and videos

rather than:

Allow all

This is particularly appropriate when sharing:

• A profile photograph
• A receipt
• An item being sold
• A scanned document
• One holiday image

Full media-library access may still be reasonable for a gallery, cloud-backup service or photo-management application. It is usually unnecessary for an app that occasionally uploads a single picture.

You can review existing media permissions through:

Settings > Privacy > Permission manager > Photos and videos

7. Remove Contacts Access From Apps That Do Not Need It

Contacts permission can expose names, telephone numbers, email addresses and other information belonging to people who never agreed to use the application.

Messaging services may use the address book to find existing users, but access is often optional.

Review:

Settings > Privacy > Permission manager > Contacts

Consider removing access from:

• Shopping apps
• Games
• Photo editors
• Streaming services
• Basic utilities
• Social apps you do not use for direct communication

Some apps may stop matching telephone numbers to names or suggesting contacts, but their primary functions may continue to work.

Ask whether the convenience is worth sharing your entire address book.

8. Review SMS, Phone and Call-Log Permissions

SMS messages and call records can contain highly sensitive information, including verification codes, customer names, personal conversations and account alerts.

Review:

• SMS
• Phone
• Call logs

Only a small number of apps should normally have access, such as your chosen phone application, messaging service or a deliberately installed call-management tool.

A game, image editor or wallpaper app requesting access to messages or call history should be treated cautiously.

Permission controls reduce access, but they do not make fundamentally untrustworthy software safe. Remove an app entirely when its requests do not match its stated purpose.

9. Hide Sensitive Notification Content on the Lock Screen

Lock Screen notifications can reveal:

• Message previews
• Email subjects
• Appointment details
• Delivery information
• Customer names
• Security alerts
• Authentication codes

Search Settings for:

Notifications on Lock Screen

Depending on the phone, you may be able to choose:

• Show all notification content
• Show sensitive content only when unlocked
• Hide sensitive notifications
• Show icons only
• Don’t show notifications

A useful balance is to show that a notification arrived while hiding its contents until the device has been unlocked.

Google includes Lock Screen notification visibility among Android’s privacy settings. 

You can also restrict individual apps under:

Settings > Notifications > App notifications

10. Turn Off Unnecessary Notification Categories

Notification access is not just an attention issue. Promotional alerts can reveal which services you use, while financial or communication notifications can expose private activity.

Open an app’s notification settings and look for separate categories such as:

• Deliveries
• Direct messages
• Security
• Offers
• Recommendations
• Account updates
• Marketing
• Reminders

Keep important operational alerts and disable promotional categories.

For example, a shopping app may be permitted to report that a parcel is arriving without being allowed to advertise daily offers.

11. Review Android’s Advertising Privacy Controls

Current Android devices may include privacy controls for advertising topics, app-suggested advertisements and ad measurement.

Open:

Settings > Google > All services > Ads > Ads privacy

Review:

Ad topics

Android may infer broad topics from app activity so participating apps can personalise advertisements.

You can disable the feature or remove individual topics.

App-suggested ads

Compatible apps may suggest advertising interests to other participating apps.

Disable this when you do not want that form of cross-app personalisation.

Ad measurement

This allows participating services to measure whether an advertisement influenced later activity.

Android permits each of these controls to be managed separately. Google also says advertising topics are automatically deleted after four weeks. 

Turning these settings off will not remove all advertising. It reduces particular forms of Android advertising personalisation and measurement.

Individual apps and websites may still use their own account, cookie or subscription settings.

12. Delete or Reset the Advertising ID Where Available

Some Android versions provide a resettable advertising identifier used by compatible applications.

Search Settings for:

Advertising ID

or open:

Settings > Privacy > Ads

Depending on the device, options may include:

• Reset advertising ID
• Delete advertising ID

Resetting creates a different identifier. Deleting prevents apps from receiving a usable value through that specific system.

Google notes that deleting the identifier does not control every type of advertising because individual applications may have their own settings and data. 

On newer phones, Android’s Ads Privacy controls may be more prominent than the older advertising-ID menu.

13. Review Google Account Activity Controls

Some privacy settings belong to the Google Account rather than the phone itself.

Open:

Settings > Google > Manage your Google Account > Data and privacy

Review saved activity such as:

• Web and App Activity
• Location-related history controls
• YouTube History
• Voice and audio activity where applicable

Google’s My Activity service allows users to view saved activity, stop particular history settings and delete existing records. 

You can also configure automatic deletion for supported activity after:

• Three months
• Eighteen months
• Thirty-six months

Google documents these automatic-deletion periods within My Activity. 

Turning off a history setting may reduce personalisation and affect recommendations, recently visited places or searches across signed-in services.

Choose the retention period that matches your needs rather than assuming that keeping everything forever is necessary.

14. Leave Automatic Permission Removal Enabled

Android can automatically remove sensitive permissions from applications that have not been used for a long period.

The setting may be called:

• Pause app activity if unused
• Remove permissions if app is unused
• Manage app if unused

Open:

Settings > Apps > Select an app

Leave the unused-app protection enabled for most software.

This helps prevent an application you installed months ago from retaining access indefinitely to location, the camera, contacts or files.

Possible exceptions include applications used infrequently but expected to function when needed, such as specialist authentication, emergency or travel tools. Check these individually rather than disabling automatic permission removal across the whole phone.

15. Keep Google Play Protect Enabled

Google Play Protect scans apps and can warn about potentially harmful behaviour.

Open:

Google Play Store > Profile picture > Play Protect > Settings

Ensure that app scanning remains enabled.

Play Protect is especially important when:

• You occasionally install apps outside Google Play.
• Someone else uses the phone.
• You test unfamiliar applications.
• The phone contains business information.
• An app requests unusual permissions.

Do not disable Play Protect because a download page tells you to. Verify the application through its genuine developer or your organisation’s IT team instead.

16. Review Special App Access

Some of Android’s most powerful permissions are not shown in the ordinary Permission Manager.

Search Settings for:

Special app access

Review the following categories carefully.

Accessibility

Accessibility services can read screen content, monitor actions and sometimes control the interface.

This is essential for genuine accessibility tools but can be abused by malicious applications.

Notification access

This can allow an app to read notifications generated by other services, potentially including message previews and authentication codes.

Display over other apps

Overlay permission allows an app to place content on top of other applications. It is used legitimately by chat bubbles and some password managers, but it can also be used to imitate login screens.

Install unknown apps

Browsers and file managers may receive permission to install APK files from outside Google Play.

This should normally be off unless you are deliberately installing verified software.

Usage access

This allows an app to see information about which other applications you use and when.

All-files access

Certain backup tools and file managers may need broad storage access, but ordinary apps rarely do.

Device-admin apps

Business-management and security tools may require this. Unknown utilities generally should not.

Revoke access from anything you no longer recognise, use or trust.

17. Review Apps With Accessibility Access Immediately

Accessibility is important enough to justify its own check.

Open:

Settings > Accessibility > Installed apps

or search for:

Accessibility services

Confirm that every enabled service is one you deliberately configured.

Be cautious when an app tells you to enable accessibility to:

• Improve battery life
• Download videos
• Display wallpapers
• Clean the phone
• Unlock premium features
• Automate ordinary taps
• Bypass an Android warning

Google warns that harmful apps may encourage users to enable restricted settings that expose sensitive data or control. 

Disable unfamiliar services and uninstall suspicious apps.

18. Disable “Install Unknown Apps” for Browsers and File Managers

Open:

Settings > Apps > Special app access > Install unknown apps

Review applications such as:

• Chrome
• Other browsers
• Files or file managers
• Messaging apps
• Cloud-storage apps

Turn off Allow from this source unless you actively need it.

Leaving the permission enabled increases the risk of accidentally installing a package downloaded from a misleading advert, message or website.

Business devices should receive private applications through an approved management platform rather than informal APK links.

19. Turn On Theft Protection

Privacy controls are valuable only while you retain physical control of the phone. A stolen unlocked handset may expose email, photographs, cloud accounts, authentication apps and financial services.

Open:

Settings > Google > All services > Theft protection

Available features can vary, but may include:

• Theft Detection Lock
• Offline Device Lock
• Failed Authentication Lock
• Remote Lock
• Identity Check on supported devices

Google says Remote Lock can allow a lost or stolen device to be locked using a verified telephone number. Theft-protection settings are managed through the Google section of Android Settings. 

Enable the features supported by your phone and confirm that your recovery telephone number is current.

These controls complement a strong screen lock; they do not replace one.

20. Use a Strong Screen Lock

A short or predictable PIN can undermine every other privacy setting.

Use:

• A longer PIN
• A strong password
• A secure pattern that is not obvious
• Fingerprint or face authentication as a convenient additional method

Avoid:

• 1234
• Repeated digits
• Birth years
• House numbers
• The same PIN used for banking or an alarm
• Patterns that leave visible traces

Ensure the phone locks promptly after inactivity and requires authentication after restarting.

Android’s factory-reset protection also helps prevent an unauthorised person from setting up a protected device after erasing it without the owner’s permission. 

21. Reduce the Automatic Lock Delay

A phone that stays unlocked for several minutes after being put down creates an avoidable risk.

Search Settings for:

• Screen timeout
• Auto-lock
• Lock after screen timeout
• Power button instantly locks

Choose a reasonably short period and enable immediate locking with the power button where available.

You may prefer a longer timeout while reading, but the delay between the screen switching off and the device actually locking should remain short.

22. Review Extend Unlock or Smart Lock Features

Android may offer features that keep the phone unlocked under particular conditions, such as:

• While carried
• Near a trusted Bluetooth device
• At a trusted place

The name may appear as Extend Unlock or Smart Lock, depending on the device.

These options improve convenience but weaken the certainty that a phone showing a blank screen is actually secured.

Review whether you still need each trusted device or condition.

A smartwatch that has been lost, an old car connection or an overly broad trusted location should be removed.

23. Check Which Apps Can Display Sensitive Information Above Others

Overlay access deserves special attention for banking, password and authentication security.

Open:

Settings > Apps > Special app access > Display over other apps

Remove access from apps that do not clearly need floating windows or bubbles.

A legitimate application may stop displaying a floating control, but its ordinary interface should continue to function.

Be suspicious when a basic utility insists that overlay permission is essential.

24. Review Health Connect Permissions

Health Connect allows compatible health and fitness applications to share data through a central Android service.

Search Settings for:

Health Connect

Review:

• Apps with access
• Data types each app can read
• Data types each app can write
• Recent access
• Data-retention settings

Health information can include activity, sleep, body measurements and other sensitive records.

A fitness app may need step or workout information without needing every health-data category.

Remove access from apps you no longer use.

25. Check the Data Safety Section Before Installing Apps

Before downloading an application from Google Play, scroll to its Data safety section.

It can describe:

• Data collected
• Data shared
• Security practices
• Whether deletion can be requested
• Whether collection is optional

Google requires developers to declare privacy and security practices for display within their Play listings. 

Treat the section as useful disclosure rather than an absolute guarantee. The information is supplied by the developer.

Compare it with:

• Requested permissions
• The app’s purpose
• Developer reputation
• Privacy policy
• Recent reviews

An app collecting substantially more information than its function appears to require may not be the right choice.

26. Remove Applications You No Longer Use

An unused app is still software installed on your phone.

It may retain:

• Account access
• Stored files
• Notification permission
• Background services
• Special access
• Data already collected by the provider

Uninstall applications that:

• You no longer recognise
• Have not been used for months
• Came from an unknown source
• Repeatedly display intrusive advertisements
• Request unrelated permissions
• Are no longer supported

Reducing the number of installed apps is one of the simplest ways to reduce privacy exposure.

27. Review Third-Party Account Access

Applications and websites can be connected directly to your Google Account without needing a permanent app installed on the phone.

Open:

Google Account > Security > Your connections to third-party apps and services

Remove access for services that you no longer use or trust.

Signing in with Google does not give every service your Google password, but it can grant access to specific account information and continue to identify your account until the connection is removed.

Removing the connection may prevent you from signing into the service until another login method is configured.

28. Keep Android and Google Play System Updates Current

Privacy controls improve over time, and security updates correct vulnerabilities that settings alone cannot prevent.

Check:

Settings > Security and privacy > System and updates

Install:

• Android security updates
• Google Play system updates
• Manufacturer firmware updates
• Application updates

Restart the phone after installation and check again, because some Google Play system components may arrive in more than one update cycle.

A phone that has permanently stopped receiving security fixes should not be relied upon indefinitely for sensitive banking, business or authentication tasks.

29. Consider Advanced Protection for Higher-Risk Users

Newer Android devices may include an Advanced Protection mode that enables stronger security and privacy defences against harmful applications, online attacks and data risks. 

This may be particularly valuable for:

• Business owners
• Administrators
• Journalists
• Public figures
• People handling sensitive customer data
• Anyone at increased risk of targeted attacks

Stronger protection may restrict sideloading or interfere with applications that depend on unusually powerful access.

Review the feature carefully before enabling it on a device that uses specialist business or accessibility software.

A 15-Minute Android Privacy Audit

You can make a significant improvement without changing every setting on the phone.

First five minutes

Open the Privacy Dashboard and review:

• Location
• Camera
• Microphone

Remove access that does not match each application’s purpose.

Next five minutes

Review:

• Lock Screen notification content
• Contacts
• Photos and videos
• Accessibility access
• Notification access

Change full access to narrower options where possible.

Final five minutes

Check:

• Ads Privacy
• Google Account activity controls
• Theft Protection
• Install unknown apps
• Unused applications

Finish by installing available system and app updates.

A Sensible Privacy Configuration

A balanced Android setup might use:

• Location: While using the app
• Precise location: Only for navigation, delivery and safety
• Camera and microphone: While using the app
• Photos: Selected images where possible
• Contacts: Communication apps only
• Lock Screen previews: Hidden until unlocked
• Advertising topics: Disabled when personalisation is not wanted
• Unused-app permissions: Automatically removed
• Install unknown apps: Disabled
• Play Protect: Enabled
• Theft Protection: Enabled
• Google activity: Limited or automatically deleted
• Special access: Reserved for trusted services

There is no perfect configuration for every person. A family-location app, work-management service or accessibility tool may require broader access for legitimate reasons.

The important point is that access should be deliberate rather than left over from a prompt you approved months ago.

Privacy Comes From Regular Review

Android privacy is not controlled by one master switch.

It is the result of many decisions involving app permissions, advertising, account history, Lock Screen content, device theft and the software you choose to install.

Start with the Privacy Dashboard and Permission Manager. Then review location, camera, microphone, photographs and special access. Hide sensitive notifications, limit advertising personalisation and make sure the phone can be locked quickly if it disappears.

Repeat the review every few months and whenever a major system update changes the available controls.

Hamilton Group can help businesses secure Android devices, configure work profiles, review application access and apply mobile-device management policies consistently.

Call 0330 043 0069 or visit hgmssp.com to speak with one of our experts.