Android app permissions: the ten-minute audit that matters

Permission prompts train you to tap Allow without reading — an app asks for location at the exact moment you are trying to do something else. A ten-minute audit reverses that. You will not find spies behind every icon, but you will find apps holding more than their job requires, and taking back the excess costs nothing.

The audit path

Settings → Privacy (or Security & privacy) → Permission manager. It groups permissions by what they access — location, camera, microphone, contacts, storage — and shows which apps hold each. Work down the big four: location, camera, microphone, contacts. For each app ask one question: does its core job need this? A torch app with location is not suspicious so much as unemployed.

The three levels, and the one to prefer

Modern Android offers "Allow all the time", "Allow only while using the app", "Ask every time" and "Don't allow". Almost nothing honest needs all-the-time location — maps should get while-using. Microphone and camera should be while-using for nearly everything. If an option surprises you, Android's newer versions also ask where photos are concerned: you can grant access to just the items you pick instead of the whole library.

The honest caveats

Menus differ by maker and version — Samsung, Xiaomi and others reshape Settings, so the names above are landmarks, not street addresses. Some revokes have consequences: revoking an alarm app's notifications silences your alarm. And permission lists do not map cleanly to badness — a scanner app genuinely needs the camera. The audit is about least privilege, not suspicion of every icon.

When you install next

Read the prompt at install time instead of tapping through — it takes the same two seconds. And for the accounts behind the apps, the same least-privilege logic applies to what data training on assistant apps receives: see the data-settings guide. Storage pressure from those same apps is its own guide: freeing space without deleting your life.