The Android privacy settings that matter most are app permissions, location access, the advertising ID, notification and lock screen visibility, and your Google account activity controls. You do not need to change everything, but a thirty-minute review of these areas removes most of the unnecessary data sharing that happens by default.
Menu names vary between manufacturers and system releases, so treat the paths below as a guide rather than a script. The search bar at the top of Settings is the quickest way to find any item mentioned here.
Start with app permissions
Permissions decide what each app can reach: camera, microphone, contacts, photos, location and more. Android groups them in a Privacy or Apps section, usually under a name like Permission manager. Open it and look at each category in turn, asking one simple question: does this app really need this to do its job?
A torch app asking for contacts or a simple game requesting the microphone deserves a firm no. For apps you do trust, choose the narrowest option on offer. We explain the reasoning in more depth in our guide to app permissions.
Check the unused apps
Android can automatically remove permissions from apps you have not opened for a while. Make sure that option is switched on, and uninstall anything you no longer use. An app that is gone cannot collect anything.
Tame location sharing
Location is the most revealing permission, because it shows where you live, work and spend your time. For each app that asks, you will normally see choices such as allow all the time, allow only while using the app, ask every time and deny.
- Only while using the app suits maps, weather and transport apps.
- Ask every time suits apps you use rarely.
- Deny suits almost everything else, including shopping and social apps that work perfectly well without it.
Where the option appears, you can also allow approximate location instead of precise location. A weather app only needs to know your town, not your front door.
Also look for settings that store location history or timelines in your Google account. These are separate from app permissions, and you can pause or limit them, or have old entries deleted automatically.
Control advertising and activity data
Your phone has an advertising ID, a resettable code that lets advertisers recognise you across different apps. In the privacy settings you can usually delete it or opt out of ad personalisation. You will still see ads, but they should be less closely tied to your behaviour.
Your Google account has its own activity controls covering web and app activity, location history and video history. Review what is being saved, switch off what you do not want, and set old data to delete automatically if the option is offered. This also affects how much of your online profile is built up, a topic we cover in how websites track you online.
Lock down the screen and notifications
Notifications can leak more than you expect. Anyone who glances at your phone on a table can read message previews. In the notification settings you can hide sensitive content on the lock screen, or hide notifications entirely until you unlock the phone.
While you are there, check that a strong screen lock is set. A PIN of six digits or more, or a proper passphrase, is far harder to guess than a short pattern. The finer points are covered in securing your smartphone lock screen.
Quick reference
| Setting | Sensible choice |
|---|---|
| Location for most apps | Only while using, or deny |
| Camera and microphone | Allow only for apps that clearly need them |
| Advertising ID | Delete or opt out of personalisation |
| Permissions for unused apps | Remove automatically |
| Lock screen notifications | Hide sensitive content |
| Account activity history | Pause or auto-delete |
Other habits that complement your Android privacy settings
Settings are only half the picture. A few habits cover the rest:
- Install apps only from the official store, and read what an app asks for before accepting.
- Keep the system and your apps updated, because updates fix security flaws. See why software updates matter.
- Turn off Bluetooth and Wi-Fi scanning in location settings if you do not need them, since nearby networks and devices can be used to estimate where you are.
- Check which apps can draw over other apps or read notifications, as these are powerful special permissions found in the special access area.
If you use public networks regularly, a VPN adds a layer of protection for your traffic, though it does nothing about what apps on the phone itself collect. Privacy settings and a VPN solve different problems, so use them together.
Where to start
Pick three tasks for today. First, open the permission manager and remove location, microphone and camera access from anything that does not obviously need it. Second, delete your advertising ID or opt out of personalisation. Third, hide sensitive notifications on the lock screen. Then come back in a few months and repeat the review. For more on keeping your phone and other gadgets safe, browse the rest of our device security guides.
Frequently asked questions
Do Android privacy settings look the same on every phone?
Not exactly. Menu names and locations differ between manufacturers and Android releases, but the main areas, such as Privacy, Location, Apps and Security, are broadly similar. Use the search bar in Settings if you cannot find something.
Will turning off location break my apps?
Only the features that need it, such as maps or ride booking. Most apps work fine if you choose to share location only while using the app, or deny it entirely.
Is the advertising ID the same as my phone number or account?
No. It is a resettable identifier that advertisers use to link activity across apps. You can delete it or reset it in the privacy settings, though your phone will still show ads.
How often should I review these settings?
A quick review every few months is plenty, and again after installing a new app or a major system update that adds new options.
