⚠️ Reality Check
No app store is your friend. This is educational content only. App permissions and privacy settings change frequently—usually for the worse. Device manufacturers and app developers regularly override your settings to keep the surveillance economy humming. Always research current practices and prepare for disappointment.
🍅 Historical Perspective: When "Experts" Were Wrong
For over 200 years, Europeans believed tomatoes were deadly poison. Wealthy aristocrats were dying after eating tomatoes, so the evidence seemed clear. The real culprit? Lead poisoning from pewter plates—the tomato's acidity leached lead from the expensive dinnerware that only the rich could afford.
The poor, eating tomatoes off wooden plates, remained mysteriously healthy. Yet "experts" continued warning against the "poisonous" tomato until the late 1800s.
Sound familiar? Today's "privacy experts" at Big Tech companies assure us that data collection is "necessary for functionality" and that we should "trust the algorithm." Meanwhile, the surveillance economy enriches tech companies while users suffer the consequences—just like lead poisoning, but for your privacy.
Sources: Smithsonian Magazine, Reader's Digest
Why App Permissions Matter (More Than Your Democracy)
Apps request access to device features and data far beyond what they need to function. This isn't incompetence—it's the business model. This excessive access enables:
- Location tracking for advertising profiles worth $12 billion annually to Google alone
- Contact harvesting to build social graphs and target your friends
- Microphone and camera access for behavioral analysis and "sentiment detection"
- File system access to scan for sensitive documents and financial data
- Network access for real-time data exfiltration to hundreds of data brokers
- Sensor access for device fingerprinting and movement pattern analysis
💡 The $227 Billion Surveillance Economy
Apps don't monetize by being useful—they monetize by violating your privacy. The global data broker industry is worth over $227 billion annually, with location data selling for $0.50-$2.00 per person per month. Your contact list? Worth $0.10-$0.50 per contact. Apps share this data with an average of 4.4 third-party trackers without meaningful consent.
Facebook (Meta) alone generated $117 billion in 2022—almost entirely from surveillance capitalism. Every permission you grant feeds this machine.
Sources: IAB Data Revenue Report 2021
iOS App Permissions
Global iOS Privacy Settings
Navigate to Settings → Privacy & Security:
- Location Services: Disable entirely or per-app
- Tracking: Disable "Allow Apps to Request to Track"
- Apple Advertising: Disable "Personalized Ads"
- Analytics: Disable "Share iPhone Analytics"
- App Privacy Report: Enable to monitor app behavior
Critical iOS Permissions to Review
- Camera: Only for camera apps, video calls
- Microphone: Only for voice recording, calls
- Contacts: Rarely necessary, often for social features
- Photos: Only for photo editing or sharing apps
- Location: Only when app is in use, never "Always"
- Calendars: Only for calendar or scheduling apps
- Reminders: Only for task management apps
- Motion & Fitness: Only for health/fitness apps
iOS Location Services Deep Dive
Settings → Privacy & Security → Location Services:
- Share My Location: Disable completely
- System Services: Disable all except Emergency SOS
- Significant Locations: Disable
- iPhone Analytics: Disable location sharing
- Routing & Traffic: Disable
- Popular Near Me: Disable
Android App Permissions
Android Global Privacy Settings
Navigate to Settings → Privacy:
- Ads: Opt out of Ads Personalization
- Usage & diagnostics: Disable
- Activity controls: Disable Web & App Activity
- Location History: Disable
- Ad ID: Reset frequently or disable
Android Permission Manager
Settings → Apps → Permission manager:
- Location: Review every app, prefer "Only while using"
- Camera: Only legitimate camera apps
- Microphone: Only voice/video apps
- Contacts: Minimize access
- Phone: Only calling apps
- SMS: Only messaging apps
- Storage: Review file access carefully
Android Special Permissions
Settings → Apps → Special app access:
- Device admin apps: Remove unnecessary admins
- Notification access: Revoke from non-essential apps
- Usage access: Highly sensitive, minimize
- Accessibility: Only for legitimate accessibility tools
- Install unknown apps: Disable for security
App-Specific Privacy Risks
Social Media Apps
Risk: Extensive data collection, contact harvesting, behavioral tracking
Minimize: Revoke contacts, location, camera (except when posting)
Shopping Apps
Risk: Location tracking, purchase history, financial data
Minimize: Disable location, use web versions when possible
Entertainment Apps
Risk: Behavioral profiling, usage patterns, personal preferences
Minimize: Disable microphone, limit storage access
Fitness Apps
Risk: Health data, location patterns, daily routines
Minimize: Consider offline alternatives, limit sharing
High-Risk Permissions
Never Grant These Unless Absolutely Necessary
- Device Administrator: Can wipe device, install apps
- Accessibility Services: Can read all screen content
- Notification Access: Can read all notifications
- Usage Access: Can track all app usage
- VPN Configuration: Can intercept all traffic
- Install Unknown Apps: Can install malware
Extremely Sensitive Permissions
- Always Location: Tracks you 24/7
- Contacts: Your entire social network
- Call Log: Who you talk to and when
- SMS: Can read all messages
- Calendar: Your schedule and meetings
- Photos: Personal and private images
Windows App Permissions
Windows Privacy Settings
Settings → Privacy:
- Location: Disable for all apps
- Camera: Review app access
- Microphone: Minimize access
- Contacts: Disable for most apps
- Calendar: Limit to calendar apps
- Call history: Disable
- Email: Only for mail apps
- Messaging: Disable
- Radios: Disable
macOS App Permissions
macOS Privacy Controls
System Preferences → Security & Privacy → Privacy:
- Location Services: Disable unnecessary apps
- Contacts: Limit to essential apps
- Calendars: Only calendar apps
- Reminders: Limit access
- Photos: Review carefully
- Camera: Only video apps
- Microphone: Only audio apps
- Full Disk Access: Extremely dangerous
Web App Permissions
Browser Permission Management
Modern browsers request permissions for web apps:
- Location: Rarely necessary
- Camera: Only for video calls
- Microphone: Only for voice features
- Notifications: Minimize, easily abused
- Persistent Storage: Can store tracking data
- Sensors: Can be used for fingerprinting
Permission Audit Strategy
Regular Audit Process
- Monthly review: Check all app permissions
- Before app installation: Review requested permissions
- After major updates: Permissions may change
- Uninstall unused apps: Reduce attack surface
- Use app alternatives: Consider web versions
Permission Minimization Principles
- Deny by default: Only grant when necessary
- Temporary access: Revoke when not needed
- Functional necessity: Does the app really need this?
- Alternative solutions: Use web versions or alternatives
- Regular review: Audit permissions regularly
Tools for Permission Management
Privacy Dashboard (iOS)
★★★★☆Built-in iOS feature showing app access to sensitive data
Access via Settings → Privacy & Security → App Privacy Report
Permission Manager (Android)
★★★★☆Android's built-in permission management system
Settings → Apps → Permission manager
Bouncer (Android)
★★★★☆Automatically revokes permissions when not in use
Good for temporary permission grants
Exodus Privacy
★★★★☆Analyzes Android apps for trackers and permissions
Check before installing new apps
App Store vs. Third-Party Apps
App Store Considerations
- Apple App Store: Better privacy controls, but still data collection
- Google Play Store: Improving privacy features, but extensive tracking
- F-Droid (Android): Open source apps, better privacy
- Sideloading: More control but higher security risk
Quick Start Guide
Immediate Actions (15 minutes)
- Review location permissions on all apps
- Disable microphone access for non-essential apps
- Revoke contacts access from social media apps
- Disable camera access except for photo/video apps
- Turn off ad tracking and personalization
This Week
- Complete full app permission audit
- Uninstall unused apps
- Configure system-wide privacy settings
- Research privacy-focused app alternatives
- Set up regular permission review schedule
Next Steps in Digital Self-Defense
App permissions are just the beginning of reclaiming your State of Surveillance:
Secure Messaging Guide Mobile Device Hardening Advanced Privacy All Privacy Guides