Quick Answer: To audit app permissions on your iPhone, open Settings > Privacy & Security, review each category (Location Services, Tracking, Camera, Microphone, Contacts, Photos), then open the App Privacy Report to see what your apps actually accessed over the last seven days. The whole pass takes about ten minutes and needs no extra apps.
Beyond software permissions, a simple physical backup for the camera is a cheap slide cover such as this 10-pack of camera cover slides. It blocks the lens when you are not using it, so nothing can quietly watch even if a permission slips through.
Most people set app permissions once, tap “Allow,” and never look again — which is exactly how a weather app ends up with your exact location around the clock. When I ran this audit on my own iPhone, three apps I’d completely forgotten about still had Always location access, and one game had the microphone. At Infurpose, we treat a quick permissions audit as basic phone hygiene, like changing a password. This guide walks you through a complete iPhone (iOS) app-permission audit in about ten minutes, using only the tools already built into Settings.
From experience: the setting that finally made me quit one big social app was Local Network access — I could not see why a photo-sharing app needed to know every device connected to my home Wi-Fi. The other one that gets me is apps that ask for "Always" location when "While Using" does the exact same job. Both are worth stopping on during this pass.
The 10-Minute iPhone Permission Audit (Quick Checklist)
Here is the full audit in order — you can do every step below in about ten minutes without any extra apps. Work through them top to bottom:
- Open the App Privacy Report — 2 min. See what your apps actually used.
- Audit Location Services — 2 min. Cut “Always” access down to “While Using” or “Never.”
- Turn off App Tracking — 30 sec. One toggle stops cross-app tracking requests.
- Review Camera, Microphone, Contacts & Photos — 2 min. Revoke anything that doesn’t obviously need them.
- Do a per-app deep check — 2 min. Open any suspicious app and see all its permissions at once.
- Run Safety Check — 1 min. Only if you’re worried someone else has access.
- Set a reminder to repeat every 3 months — 30 sec.
Step 1 — Start With the App Privacy Report
The App Privacy Report is the fastest way to see which apps have actually used your location, camera, microphone, and contacts in the last seven days. Go to Settings > Privacy & Security > App Privacy Report. If this is your first time, tap “Turn On App Privacy Report” and give it a few days to collect data — it only logs activity after you enable it.
Once it has data, the report shows each app’s recent sensor and data access, plus the web domains those apps contacted in the background. Scan for anything that doesn’t fit: a note-taking app reaching for your microphone, or a simple utility phoning out to dozens of ad domains. This single screen is the most powerful audit tool on your iPhone, and it’s the one most other guides skip entirely — so start here before you change a single toggle.
Step 2 — Audit Location Services (the biggest privacy leak)
Location is the permission most apps overreach on, so set every app to “While Using” or “Never” unless it truly needs “Always.” Open Settings > Privacy & Security > Location Services and go down the list app by app.
Each app gives you four choices: Never, Ask Next Time Or When I Share, While Using the App, and Always. Very few apps genuinely need “Always” — usually just navigation, find-my-device, and some fitness trackers. Everything else should be “While Using” at most. Below those options you’ll also see a Precise Location toggle; turn it off for weather, shopping, and social apps that only need your general area, not your exact spot. A small gray or purple arrow next to an app means it used your location recently, which is a quick way to catch overreach.
When I did this on my own phone, the worst offenders were apps I hadn’t opened in months but that still had “Always” access — a food-delivery app and two retailers. Switching them to “While Using” changed nothing about how they worked and quietly closed a real leak.
Step 3 — Turn Off App Tracking
Stop apps from following you across other apps and websites by turning off “Allow Apps to Request to Track.” Go to Settings > Privacy & Security > Tracking and switch off Allow Apps to Request to Track.
This is Apple’s App Tracking Transparency control. With it off, any app that would have asked to track you across other companies’ apps and sites is automatically denied — you don’t have to tap “Ask App Not to Track” one app at a time. It’s the highest-impact single tap in this whole audit, and it takes about five seconds.
Step 4 — Review Camera, Microphone, Contacts & Photos
Open each of these categories under Privacy & Security and revoke access from any app that doesn’t obviously need it. Back on the Settings > Privacy & Security screen you’ll find separate entries for Camera, Microphone, Contacts, and Photos. Tap into each one and you’ll see every app that has requested that permission, with a toggle beside it.
For Photos, choose Limited Access instead of Full Access wherever you can — you pick exactly which photos an app may see, rather than handing over your entire library. Contacts offers a similar Limited option so you share only chosen contacts. The biggest red flags are mismatches: a flashlight, calculator, or simple game asking for the microphone, camera, or your contacts has no legitimate reason for it. When the permission doesn’t match the app’s core job, switch it off.
Step 5 — Do a Per-App Deep Check
For any app you’re unsure about, open it directly in Settings to see every permission it holds in one place. On iOS 18 and later, go to Settings > Apps > [App name]; on older versions of iOS, scroll down the main Settings list until you reach the app’s name and tap it.
This per-app view collects location, camera, microphone, notifications, cellular data, and more into a single screen, so you don’t have to remember which category you were in. While you’re there, check Background App Refresh and each app’s Cellular (Mobile Data) access too — an app that doesn’t need to run in the background is one less thing quietly using your data and battery. Ask a simple question for each permission: does this app’s main function actually require it? If the answer is no, turn it off.
Step 6 — Run Safety Check If Someone Else Might Have Access
If you’re worried a partner, family member, or someone else set up access to your phone, Safety Check lets you review and reset sharing in one place. Open Settings > Privacy & Security > Safety Check. You’ll see two paths: Emergency Reset, which immediately stops sharing your data with everyone across every app, and Manage Sharing & Access, which walks you through it person by person and app by app.
If you’re in a domestic-abuse or controlling situation, be aware that changing these settings can sometimes be noticed by the other person, so trust your judgment about timing and your safety. For a calmer read on the warning signs, see our guide on signs your iPhone is being monitored and whether your phone is being tracked. Safety Check is built for exactly this moment, and it doesn’t require any technical knowledge to use.
How Often Should You Audit iPhone Permissions?
Run the full 10-minute audit every three months, and do a quick App Privacy Report check any time you install a batch of new apps. A few moments deserve their own quick pass: after a major iOS update (which can reset or add permissions), after you’ve let someone else borrow your phone, and whenever an app suddenly asks for access it never needed before.
Making this a routine rather than a one-time cleanup is what keeps your phone tight over the long run. Pair it with the rest of your setup by working through our complete iPhone privacy settings guide and by locking down your logins with two-factor authentication. Small, repeatable habits beat a single big cleanup you never repeat.
Frequently Asked Questions
How do I audit app permissions on my iPhone?
Open Settings > Privacy & Security, review each category (Location Services, Tracking, Camera, Microphone, Contacts, Photos), then open the App Privacy Report to see what your apps actually accessed. The full pass takes about ten minutes and needs no extra apps.
Will turning off permissions break my apps?
Usually not — most apps keep working with reduced access and simply re-prompt if they truly need a permission later. If a core feature stops working (like a maps app that needs your location), you can re-enable just that one permission without undoing the rest of your audit.
What is the App Privacy Report and where do I find it?
It’s a built-in iOS tool at Settings > Privacy & Security > App Privacy Report that logs which apps used your sensors and data and which web domains they contacted over the last seven days. Turn it on once and let it collect data for a few days before reviewing.
Which app permission is the most important to lock down first?
Location, especially any app set to “Always.” Switch apps to “While Using” or “Never” and turn off Precise Location for anything that doesn’t need your exact position, such as weather, shopping, and social apps.
Can someone secretly access my iPhone through app permissions?
Permissions themselves are visible in Settings, but a spy app or a shared setup can quietly use them. Run Safety Check, review the App Privacy Report for unexpected access, and see Infurpose’s guide on signs your iPhone is being monitored if anything looks off.
The Bottom Line
A clean iPhone permission audit comes down to three things: the App Privacy Report is your fastest way to see what apps are really doing, Location and Tracking are the highest-impact fixes you can make in seconds, and re-running the whole pass every three months keeps it that way. None of it requires extra software or technical skill — just ten focused minutes in Settings. For more plain-English phone privacy how-tos, explore the rest of Infurpose, starting with our iPhone privacy settings guide.