How to Audit Every App Permission on Your iPhone

Published August 14, 2026 · Last reviewed September 2, 2026

Why category-first beats app-first

Most people audit permissions by scrolling their app list and opening each app's settings. That takes an hour and teaches you nothing, because you see one permission at a time with no basis for comparison. Going the other way — opening Microphone and seeing all eleven apps that can listen — makes the odd ones jump out instantly. A note-taking app with microphone access is expected. A shopping app with microphone access is not.

Comparison is the whole trick. You are not trying to remember what each app claimed when it asked; you are looking for the entries that do not belong in a list.

The order to work in

Sensitivity descends roughly like this, so this is the order that gets the most value from the first five minutes:

1. Microphone — the most intrusive sensor, and the one fewest apps genuinely need.
2. Camera — same reasoning; anything that is not a camera, scanner, or video-call app is questionable.
3. Contacts — the permission that leaks other people's data, not just your own, and cannot be un-shared once uploaded.
4. Photos — where full-library access is rarely necessary; Limited Access almost always suffices.
5. Location Services — big enough to deserve its own pass, covered in the location guide.
6. Local Network, Bluetooth, Health, Calendars, Reminders, Speech Recognition, Motion & Fitness — quick passes, but Local Network and Bluetooth are worth reading closely, because both can be used to profile the devices around you.

The decision rule for each app

Action

Ask one question per entry: does this app need this permission for the specific thing I use it for?

Why it helps

Apps request permissions for their whole feature set, not for your use of it. A social app may legitimately need a camera for its story feature you have never opened.

Verification

You can state, in one sentence, why each remaining permission exists.

Action

Revoke first and re-grant on demand, rather than agonising over edge cases.

Why it helps

iOS re-prompts when an app genuinely needs a permission for something you asked it to do, so the cost of a wrong revocation is one extra tap later.

Verification

Apps you use daily continue working; anything that breaks re-asks and you decide in context.

Action

Switch Photos access from full to Limited Access for any app that is not a photo editor or backup service.

Why it helps

Limited Access shows the app only the images you pick each time, instead of granting a standing read of your whole library and its location metadata.

Verification

The app shows a picker when it needs an image rather than browsing everything.

Action

Turn off Background App Refresh for apps that do not need to update while closed, in Settings › General › Background App Refresh.

Why it helps

Background refresh is both a privacy and a battery cost: an app that wakes periodically can also report location and usage while you are not looking.

Verification

The app list shows refresh enabled only for messaging, mail, and anything you rely on for timely alerts.

Verify with the App Privacy Report

Turn on App Privacy Report at the bottom of Settings › Privacy & Security. Over the following seven days it logs which apps actually accessed the camera, microphone, photos, contacts, and location, and which network domains they contacted — including domains contacted while you were not using the app.

This is the only part of the process that shows behaviour rather than policy. An app that accessed your location 340 times in a week, or that contacts a dozen advertising domains, is telling you something no privacy label will. Come back in a week and revoke based on what you see.

Two settings people miss

• Local Network access lets an app enumerate devices on your Wi-Fi — printers, TVs, smart-home gear. That inventory is genuinely identifying. Only smart-home and casting apps need it.
• Bluetooth access can be used for proximity-based tracking in physical retail. Grant it to headphones, car, and wearable apps, and to nothing else.

How it works

iOS permissions work on a deny-by-default, prompt-on-first-use model. An app cannot read your contacts or open the microphone until it calls the relevant system API, at which point iOS suspends the request and shows you a prompt. Your answer is stored per app, and the app never sees the difference between “denied” and “there is nothing here” — which is why a revoked permission usually degrades a feature rather than crashing the app.

Crucially, that grant is indefinite. There is no expiry, no periodic re-confirmation, and no notification when a permission you granted in 2022 gets used for the first time in a year. The system is excellent at the moment of decision and does nothing to help you revisit it. Auditing is the manual compensation for that design gap.

The App Privacy Report closes the loop differently: rather than asking what an app may do, it records what it did, sampling sensor access and outbound domain contacts over a rolling seven-day window and keeping that log entirely on the device. Because the log is behavioural, it catches the mismatch between a stated purpose and an actual pattern — the thing a permission list alone can never show you.

Worked example

A fifteen-minute audit on a phone with 94 apps installed. Opening Microphone lists nine apps. Seven make sense — two messaging apps, a voice recorder, a video-call app, a music identification app, a translation app, and the built-in dictation. Two do not: a supermarket loyalty app and a puzzle game. Both are revoked in eight seconds. Neither has since re-prompted, which tells you they never needed it for anything the owner does.

Contacts lists fourteen apps, of which four are messaging apps that need it, and ten are apps that asked once during onboarding to find friends. All ten are revoked. Note the asymmetry here: revoking does not recall the copy already uploaded, which is precisely why the default answer to a contacts prompt should be no.

Photos shows six apps with full library access. Only the cloud backup app and the photo editor need it; the other four are moved to Limited Access. Seven days later the App Privacy Report shows the biggest surprise of the exercise: a weather app had accessed location 218 times in a week despite being opened twice. Its access is changed to While Using the App, and the phone's overnight battery drain improves as a side effect.