You turn on App Privacy Report for the first time and leave it running for a week. Then you look at what it captured.
A shopping app you downloaded during a sale three months ago has pinged your location 87 times. Twice at 3am. A camera app you haven’t opened since February accessed your microphone 12 times. A flashlight app — a flashlight app — contacted 14 different network domains in the past seven days. None of this sent you a notification. None of it asked permission again. You granted access once during setup, half-reading the dialog box, and that was enough.
This is what your iPhone has been doing in the background. Not because something is broken. Because you never changed the defaults.
The short answer: Apple builds strong privacy tools, but most are off or half-on by default. The five-minute wins: turn off “Allow Apps to Request to Track,” move every app’s location to “While Using” and disable Precise Location where it isn’t needed, turn off Significant Locations, and enable Advanced Data Protection so Apple can’t read your iCloud backup. Then switch on App Privacy Report and check it in a week. All of this lives in Settings > Privacy & Security.
Jump to: Why defaults matter · Location Services · Tracking · App permissions · Apple’s own data collection · iCloud and Advanced Data Protection · Lock Screen and passcode · Safari · App Privacy Report · The three changes that matter most
Why defaults are the whole argument
Apple’s privacy marketing is everywhere — billboard-sized posters at airports, the “Privacy. That’s iPhone.” campaign, the App Store privacy nutrition labels. And Apple has made genuinely meaningful choices that distinguish the iPhone from Android in real, measurable ways. App Tracking Transparency changed the economics of mobile advertising. Safari’s Intelligent Tracking Prevention is ahead of Chrome’s approach by years. Advanced Data Protection, if you enable it, gives you encryption that Apple itself cannot break.
But “privacy-focused company” and “privacy-maximized by default” are different claims, and Apple only makes the first one.
The defaults on a new iPhone let apps request location always — including in the background, while you’re asleep. They let apps ask to track you across other companies’ apps and websites. They send analytics data to Apple. They let Siri learn from your usage and surface that learning across apps you haven’t opened. They back up your data to iCloud in a form that Apple can technically read and produce in response to law enforcement requests.
Most people never revisit their settings after initial setup. A 2023 Pew Research study found that fewer than one in five smartphone users regularly review app permissions. Apple’s defaults are the settings nearly everyone is running. And some of those defaults weren’t chosen with your privacy as the first priority.
This guide walks through every setting that matters. Not every setting — some are genuinely minor — but everything that makes a real difference. We’ll tell you which changes are high impact and which are marginal, so you can spend five focused minutes instead of thirty scattered ones.
Location Services
Go to Settings > Privacy & Security > Location Services.
This is the single most impactful section for most people. Location data is extraordinarily sensitive — your location history over time reveals your home, your workplace, your doctor, your places of worship, who you meet with and how often. It is among the most sought-after data types in the data broker ecosystem, and it flows off your phone through more channels than most people realize.
Each app in the list has one of four options: Never, Ask Next Time or When I Share, While Using the App, and Always. The difference between “While Using” and “Always” isn’t cosmetic. “While Using” means the app can only access your location when it’s open on your screen, or within a few seconds of you switching away from it. “Always” means the app can ping your location in the background — while you’re asleep, while you’re on another app, any time it wants. Very few apps have a genuine reason to need your location at 3am. That shopping app does not.
Work through the list and move everything to “While Using” at minimum. For apps that don’t need location at all — a flashlight, a calculator, a recipe app — switch them to Never. You’ll likely be surprised how many apps have “Always” access that you never consciously granted.
Below the app list, look for the Precise Location toggle inside each app’s entry. This was added in iOS 14 and it’s one of the most underused controls on the phone. When Precise Location is off, the app receives only a general area — roughly one to two miles — rather than your exact GPS coordinates. For a restaurant discovery app, a general area is all it needs to show you nearby results. For a weather app, your neighborhood is sufficient. For a delivery app during an active order, you might want precision on. For everything else, turning it off costs you nothing and removes your exact home address from the data stream.
Scroll down past all the apps to System Services. This is where Apple’s own location access lives, and it contains one entry that catches almost everyone off guard: Significant Locations.
Significant Locations is a feature that stores a history of places you’ve visited frequently — your home, your workplace, your gym, the hospital you visited twice last month. Apple uses this to power Siri suggestions and features like “Time to leave” notifications. The data lives on your device and, Apple says, is end-to-end encrypted in iCloud. But you may not want your iPhone building and maintaining a movement diary regardless. To disable it: Settings > Privacy & Security > Location Services > System Services > Significant Locations. Toggle it off and clear the history.
Also in System Services: Location-Based Apple Ads (off), iPhone Analytics (off), and Routing & Traffic (your call; this one contributes anonymized data to Apple Maps, which is relatively low risk).
As of iOS 26.3, there’s a newer control worth knowing about: Limit Precise Location for carriers. It lowers the accuracy of the location data your mobile carrier can pull from cell tower networks. That closes a gap that sits outside app-level location permissions entirely. Check your Location Services and carrier settings for it if you’re on iOS 26.3 or later.
Tracking
Go to Settings > Privacy & Security > Tracking.
App Tracking Transparency — ATT — launched with iOS 14.5 in April 2021, and it was the most disruptive thing to happen to mobile advertising in a decade. When you open an app for the first time after ATT is active, the app can ask permission to track you across other companies’ apps and websites. If you say no, the app doesn’t receive your IDFA — Identifier for Advertisers — a unique code that advertisers use to link your behavior across apps and build profiles.
The setting “Allow Apps to Request to Track” controls whether apps are even permitted to show you that prompt. Turn it off, and apps cannot ask. They don’t get the IDFA. Full stop.
The impact of this was documented in real financial results. Meta’s earnings call in February 2022 revealed that ATT cost the company approximately $10 billion in revenue in 2021. Within a few months of ATT launching, Apple’s own research showed that 96% of users in the US denied tracking when given the prompt. Opt-in rates have stayed low ever since, in the 15–30% range across app categories as of 2026. Advertisers lost the ability to follow you across apps. Mobile advertising attribution, the system by which marketers know which ad caused which purchase, was significantly disrupted.
Turn this off. It is one of the highest-impact privacy settings on the phone.
App Permissions
Go to Settings > Privacy & Security, then scroll through the individual permission categories.
Camera and Microphone are the ones people worry about most, partly because the worry is visceral and partly because it’s justified. Every app that has camera or microphone access appears in these lists. Review them. Revoke access from anything that doesn’t have an obvious reason to need it.
Starting with iOS 14, your iPhone shows a colored dot at the top of the screen when the camera or microphone is active. Orange means the microphone is in use. Green means the camera — or both — is active. This indicator cannot be disabled by apps and is handled at the hardware level. If you see the orange dot appear while you’re not on a call or recording something, an app is using your microphone. You can check which app most recently used it by swiping down to see Control Center immediately — it shows the last app that accessed the microphone.
Photos is more complicated than it looks. iOS 14 introduced three tiers of access: Full Access, Selected Photos, and No Access. Full Access means the app can see, read, and in some cases upload every photo on your device. This includes photos with embedded location metadata — where the shot was taken, stored as GPS coordinates in the image file. Selected Photos lets you choose specific images the app can access. No Access blocks it entirely.
Go through the Photos list. For social apps, editing apps, and anything where you actively share images, “Selected Photos” is often sufficient — let the app see only what you share with it, not your entire camera roll. Full Access should be reserved for your actual camera replacement app or a backup service you’ve deliberately chosen. A food delivery app or a ride-share app should not have Full Access to your photos.
Contacts access is worth a hard look. When you grant an app access to your contacts, you’re not just sharing your own information. You’re sharing the names, phone numbers, email addresses, and in many cases physical addresses of everyone in your address book. Those people haven’t consented to share their data with that app. They didn’t install it. They don’t know.
WhatsApp, LinkedIn, and a long list of business and networking apps request contacts access. Some genuinely need it. Others are harvesting your address book to build social graphs, find new users to target, or enrich their advertising data with real relationship networks. Review each app. If you don’t have a clear reason why that app needs your contacts, revoke the access.
Apple’s Own Data Collection
Apple collects data from you too. Less than Google, more than they advertise.
Go to Settings > Privacy & Security > Analytics & Improvements. Toggle off Share iPhone Analytics. This stops your iPhone from sending usage data, crash logs, and diagnostic information to Apple. If you use Siri, also toggle off Improve Siri & Dictation and Share iCloud Analytics. These control whether recordings of your Siri requests are reviewed by Apple to improve the product.
Go to Settings > Privacy & Security > Apple Advertising. Toggle off Personalized Ads. Apple runs advertising in the App Store, Apple News, and the Stocks app. Turning off personalized ads doesn’t make the ads disappear — it just makes them untargeted. Your data is no longer used to select which ads you see. This is a minor improvement given that you’re only changing Apple’s own ad targeting, not the behavior of third-party apps, but it’s a low-effort toggle worth flipping.
The more significant Apple-specific settings live under Settings > Siri & Search. Each app in the list has toggles for “Learn from this App,” “Show in Home Screen Search,” “Show in App Library,” and “Suggest App.” When “Learn from this App” is on, Siri builds a model of how you use that app — what you search for, what you tap, what time of day you open it — and uses that model to surface suggestions elsewhere on your phone. This is how Siri learns that you read the news at 7am and preloads Apple News in your suggestions.
Whether that feels helpful or invasive depends on your preferences. If you want to limit it: go through the Siri & Search settings, identify apps you don’t want contributing to your Siri profile, and toggle off “Learn from this App” for each one. Also consider: Settings > Siri & Search > Siri Suggestions — the toggles at the top control whether Siri suggestions appear on your Lock Screen, Home Screen, and Search at all.
iCloud and Advanced Data Protection
Go to Settings > [Your Name] > iCloud.
Your iCloud backup contains almost everything on your phone — messages, photos, contacts, app data, health data, your call history. Apple can read that backup. Apple has provided iCloud backups to law enforcement in response to legal requests, and this is documented in Apple’s own transparency report. In a 2022 report covering the first half of that year, Apple said it received 7,122 device requests from US government agencies and provided data in 82% of them.
This changed significantly with Advanced Data Protection, introduced in iOS 16.2 and available on any iPhone running iOS 16.2 or later. To enable it: Settings > [Your Name] > iCloud > Advanced Data Protection.
Advanced Data Protection applies end-to-end encryption to iCloud Backups, Photos, Notes, Safari bookmarks, Siri Shortcuts, Wallet passes, and several other data categories. End-to-end encrypted means the encryption keys exist only on your trusted devices — not on Apple’s servers. Apple cannot read your backups. Apple cannot produce them in response to a legal request because Apple doesn’t have the decryption keys. Only you and your trusted devices do.
This is the highest-impact privacy setting available on an iPhone. It is not enabled by default.
Before you enable it, read the warning Apple shows you carefully. If you lose all your trusted devices and your recovery key, you lose access to your data permanently. Apple cannot help you recover it. Set up a recovery contact (a trusted person who can help you verify your identity) or generate and safely store a recovery key. This is the one setting where the setup process requires a few minutes of actual attention.
Three things are deliberately not covered by Advanced Data Protection: iCloud Mail, Contacts, and Calendars. Apple has said these remain outside end-to-end encryption because they need to interoperate with third-party mail, contact, and calendar services using standard protocols. This is a real architectural constraint, not an excuse. If mail privacy is a priority, consider moving to a provider like Proton Mail.
Lock Screen and Passcode
Go to Settings > Face ID & Passcode.
Scroll down to Allow Access When Locked. This section controls what someone can do with your phone without unlocking it. By default, your iPhone lets people access Notification Center, Control Center, Siri, Reply with Message, and several other features from the lock screen. Depending on your threat model, you may want to restrict this.
Notification Center on the lock screen displays message previews, email subjects, app alerts — a significant amount of sensitive information visible to anyone who picks up your phone. Go to Settings > Notifications and look for Show Previews. Changing this to “When Unlocked” means notification content is hidden on the lock screen but visible once you authenticate. “Never” hides it entirely.
Control Center on the lock screen lets someone toggle Airplane Mode, which would disconnect your phone from the network. That matters if someone grabs your phone and wants to prevent a remote wipe via Find My.
More importantly: your passcode. A six-digit PIN has one million possible combinations. That sounds like a lot until you consider that tools like Cellebrite, which are sold to law enforcement agencies globally, can attempt PIN combinations at speed. US federal courts have seen prosecutions built on iPhone data extracted via these tools. A six-digit PIN is meaningful protection against casual access. Against a dedicated adversary with the right equipment, it is not.
An alphanumeric passcode changes the calculus substantially. Go to Settings > Face ID & Passcode > Change Passcode. Tap “Passcode Options” and choose “Custom Alphanumeric Code.” A ten-character passcode mixing letters, numbers, and a symbol is computationally impractical to brute-force with current tools. The tradeoff is slightly more friction when you unlock your phone. For most people, Face ID covers the daily unlock and the longer passcode is only needed after a restart or when Face ID fails. The inconvenience is small.
Safari
Go to Settings > Safari.
Prevent Cross-Site Tracking is on by default in current versions of iOS, including iOS 26. Keep it on. This is Safari’s Intelligent Tracking Prevention. It limits the ability of tracking scripts to follow you across websites by restricting how long-lived cross-site cookies can persist. This is one of the areas where Apple has genuinely led the industry. Don’t turn it off.
As of iOS 26, Safari also enables Advanced Fingerprinting Protection for all browsing by default, not just Private Browsing. It obscures the browser and device signals that trackers use to build a browser fingerprint. iOS 26 added Link Tracking Protection too, which strips tracking parameters (like gclid and fbclid) out of URLs.
Hide IP Address (Settings > Safari > Hide IP Address) was introduced in iOS 15. In current iOS versions this defaults to “Trackers Only.” Safari hides your IP address from domains that Apple identifies as known trackers. Your IP address can reveal your approximate location and is used to link your browsing sessions. This setting limits that fingerprinting vector without routing all your traffic through a proxy. It’s on by default and should stay that way.
iCloud Private Relay is a bigger step and requires an iCloud+ subscription (which starts at $0.99/month in the US). When enabled, your Safari traffic is routed through two separate relay servers. The first relay, operated by Apple, knows your IP address but not what you’re browsing. The second relay, operated by a third party, knows what you’re browsing but not your IP address. No single party sees both pieces of information. This is not a VPN — it only applies to Safari traffic and certain DNS lookups, not to app traffic or other browsers — but it’s a meaningful upgrade for everyday browsing. Enable it at Settings > [Your Name] > iCloud > Private Relay.
Fraudulent Website Warning uses Google Safe Browsing to check URLs against a database of known phishing and malware sites. It’s on by default. Leave it on. Apple says it checks URLs against the list without sending them to Google in identifiable form, using a privacy-preserving lookup technique.
One setting to check under Settings > Safari > Advanced: JavaScript. It’s on by default and should stay on for normal browsing, but if you visit a site you don’t trust and want maximum isolation, you can temporarily disable it. The web breaks significantly without JavaScript, so this is situational rather than a general recommendation.
App Privacy Report
Settings > Privacy & Security > App Privacy Report. Enable it.
App Privacy Report requires iOS 15.2 or later. Once enabled, it starts building a record of what apps on your phone are doing: which permissions they access, when, and which network domains they contact. It takes about a week to accumulate meaningful data. Then look at it.
What you’ll see is organized by app. For each app, you’ll see a list of permission accesses with timestamps — every time that app opened your camera, contacted your location, read your photos. You’ll also see a list of network domains the app contacted, which tells you which advertising networks, analytics services, and data brokers the app was talking to in the background.
This is the most concrete way to audit what you agreed to and whether it matches reality. The shopping app that accessed your location 87 times is not a hypothetical — these numbers show up regularly in App Privacy Reports from users who’ve actually checked. The 3am location pings happen because an app received a background notification and took the opportunity to grab a fresh location fix while the phone was sitting on your nightstand.
If you see something alarming, revoke the relevant permission in Settings > Privacy & Security and consider whether the app deserves to stay on your phone at all.
Three changes that matter most
If you do nothing else from this guide, do these three things.
Enable Advanced Data Protection. It’s the one setting that changes Apple’s fundamental ability to access your data. Without it, your iCloud backup is readable by Apple and producible to law enforcement. With it, the encryption keys exist only on your devices. Go to Settings > [Your Name] > iCloud > Advanced Data Protection, enable it, and follow the prompts to set up a recovery method. Spend fifteen minutes on this once and you’ve changed your privacy posture significantly.
Audit Location permissions. Go through every app in Settings > Privacy & Security > Location Services and move anything set to “Always” down to “While Using.” Turn off Precise Location for apps that don’t need your exact GPS position. Then go to System Services and disable Significant Locations. Location data is the data type that correlates most powerfully with the rest of your life. It reveals your home, your health appointments, your relationships, and your routines. Tightening it costs you almost nothing in daily function.
Enable App Privacy Report and check it in a week. Settings > Privacy & Security > App Privacy Report. Turn it on now, before you close this tab. Come back in seven days. Let what you see inform which permissions you revoke next.
The rest of the settings in this guide matter — some of them significantly. But these three are the ones where the gap between what most people have configured and what a privacy-conscious person would choose is widest. Start here.
What Apple gets right
Apple charges a premium for hardware, which means their business model doesn’t depend on selling your data to advertisers the way an ad-funded platform’s does. That structural incentive is real and it matters. Apple’s implementation of App Tracking Transparency was opposed loudly and explicitly by Meta, Google, and the broader advertising industry — and Apple shipped it anyway, at measurable cost to their developer relationships. That took genuine organizational will.
Safari’s Intelligent Tracking Prevention has been iterating for years and is technically ahead of Chrome’s approach. The App Privacy Report, the permission indicators for camera and microphone, the per-photo access controls — these are Apple building genuine infrastructure to let you see and control what’s happening.
Advanced Data Protection, when enabled, provides a level of backup encryption that few cloud services offer. Apple genuinely cannot access that data. That’s a harder engineering and legal commitment to make than it looks.
But the defaults matter. Privacy tools that require users to navigate five menus to activate them are not the same as privacy by design. Apple has chosen defaults that leave your location data, your analytics, your Siri learning, and your iCloud backups more accessible than they need to be. And the vast majority of iPhone users are running those defaults right now.
The phone is capable of more privacy than it ships with. This guide is how you close the gap.
KnytX Shield is built to scan data broker databases, submit removal requests on your behalf, and watch for new exposures — including data that flows off your phone through apps and advertising networks. It isn’t live yet; join the waitlist to get in early.