Best Privacy Settings to Change on Android in 2026

This guide uses current Google Android documentation checked in August 2026. Menu names are examples, not promises. Google notes that some controls require a particular Android version, and manufacturers such as Samsung, Motorola, Xiaomi, and others can arrange settings differently. A work-managed phone, child account, Android Go device, or phone without Google Play services may also behave differently. If a label does not match, search inside Settings for the control name or check your manufacturer's support page.

The goal is not to create one supposedly perfect configuration. It is to give each app the least access it needs while preserving the functions, safety features, and recovery options you actually use.

Begin with Security and privacy, not random toggles

Open Settings, then look for Security and privacy, Privacy, or similarly named sections. On supported Android versions, this area brings together device-lock warnings, account alerts, system updates, Play Protect, device-finder status, and permission controls. Google's Android security and privacy overview explains the main groups. Deal with any clear security warning before adjusting smaller privacy preferences.

Also install current Android security and Google Play system updates when available for your device. A carefully restricted app can still be risky if the phone is missing security fixes. Restart after an update when prompted, then return to the privacy review because a major update may introduce a new control or ask you to confirm an existing choice.

Avoid copying a screenshot from another phone as if it were a universal path. Use Settings search for terms such as Permission manager, Privacy dashboard, Find Hub, Play Protect, Ads privacy, and Private space. This is usually faster and more reliable than opening several nested menus.

1. Review app access in Permission manager

Permission manager shows which apps can use a particular category of data or hardware. The current Google path is commonly Settings > Security and privacy > Privacy > Permission manager, but it can differ. You can also open an individual app under Settings > Apps, choose the app, and tap Permissions.

Start with the permissions that reveal the most or can act on your behalf:

• location
• microphone
• camera
• contacts
• call logs and phone
• SMS
• photos and videos
• files
• nearby devices
• health or fitness information
• notifications

Ask a practical question for every approval: what feature stops working if this permission is removed? A camera app needs the camera. A video-call app needs the camera and microphone during a call. A basic calculator probably does not need contacts, location, or the microphone.

Where Android offers several choices, prefer the narrowest one that lets the wanted feature work. Depending on the permission and Android version, the choices can include Allow only while using the app, Ask every time, Don't allow, and for location, Allow all the time. Background access deserves extra scrutiny because the app can use it when you are not actively looking at the app.

Do not revoke a permission simply because its name sounds sensitive. A phone app needs microphone access during calls, an accessibility service may need broad access to perform its stated task, and a trusted password manager may require special integration. Verify the feature and developer before deciding.

2. Use Privacy dashboard to investigate actual access

Permission manager tells you what an app may do. Privacy dashboard helps show what supported apps recently accessed. On Android 13 and later, Google's documentation describes a seven-day view. Android 12 shows a shorter 24-hour view. Earlier versions may not have this dashboard.

Open Settings > Security and privacy, or Privacy, then Privacy dashboard. Google's Privacy dashboard guide shows the supported version differences. Select Location, Camera, Microphone, or another category. Look for access that does not fit how you used the phone. A maps app using location while you navigated is expected. A simple game accessing the microphone overnight deserves investigation.

Unexpected access is not automatic proof of spying. First check whether a feature, widget, voice command, call, wearable, or background service explains it. Then open the app's permission page and reduce access if the feature is not needed. If the app's purpose and access still do not make sense, uninstall it. The Tutorils guide on finding and removing spyware apps from a phone provides a wider inspection process for genuinely suspicious behaviour.

3. Let Android pause unused apps

Apps you stopped using should not keep old permission access indefinitely. Current Android can treat long-unused apps as unused, revoke permissions, stop them running in the background, stop notifications, and remove temporary files. The control is commonly called Pause app activity if unused, Remove permissions if app isn't used, or Manage app if unused.

Open Settings > Apps > Unused apps where available, or open an individual app's information page and find the unused-app setting. Leave this protection enabled for ordinary apps.

There are legitimate exceptions. An emergency app, device companion, medical app, security key, or rarely opened authenticator may still have a critical purpose. Do not exclude it blindly, but do not allow it blindly either. Read its current support documentation and test what happens after changing the setting.

If an old app has no continuing value, uninstall it rather than merely pausing it. Fewer installed apps mean fewer accounts, libraries, permissions, and update obligations to maintain.

4. Give location access by purpose

Location is not one switch. Android separates device location, each app's permission, precise or approximate location on supported versions, background access, Location Accuracy, Wi-Fi scanning, Bluetooth scanning, Timeline, Location Sharing, Find Hub, and emergency services.

For each app under Location > App location permissions, choose based on the feature. Google's app location permission guide explains the available categories:

• Use Don't allow when location has no clear role.
• Use Ask every time for an occasional location task when repeated prompts are acceptable.
• Use Allow only while using the app for navigation, local search, or check-in features that work while the app is open.
• Use Allow all the time only when a trusted feature genuinely needs background location, such as an intentionally configured safety or automation service.

On Android 12 and later, supported apps can often receive approximate location instead of precise location. A weather app may work with an approximate area. Turn-by-turn navigation, ride pickup, and device finding may need precise location. Test the feature after changing it instead of assuming the broadest option is required.

Location Accuracy is a separate device service. When enabled, Android with Google Play services can use signals such as GPS, Wi-Fi, mobile networks, and sensors to estimate location more effectively. Turning it off can reduce accuracy for navigation and lost-device finding. It does not replace app permissions, and turning it on does not force every app to receive precise location.

5. Decide whether Wi-Fi and Bluetooth scanning help you

On supported phones, Settings > Location > Location services contains Wi-Fi scanning and Bluetooth scanning. Google's Android location settings guide explains these controls and their version-specific paths. They let the device scan nearby access points or Bluetooth devices to improve location information, including when the main connection toggle is not being used in the usual way.

Turn scanning off if you do not need the location improvement and prefer to reduce this background sensing. Keep it on if indoor positioning, nearby-device features, or Find Hub accuracy matters more to you. After changing it, test Maps, ride pickup, location-based reminders, and lost-device tools.

Do not confuse scanning with the Nearby devices permission. Android can allow an app to find or connect with nearby devices under a separate permission. Review that access in Permission manager for apps that communicate with watches, earbuds, cars, smart-home devices, or trackers.

6. Watch camera and microphone indicators

On Android 12 and later, a green indicator appears when an app uses the camera or microphone. Swipe down and tap the indicator to see which app or service is responsible. You can then open its permission controls.

Supported phones also offer Camera access and Microphone access Quick Settings tiles or privacy controls. These device-wide controls are useful when you want a temporary block, such as during a confidential in-person conversation. Remember to restore access before a trusted call, camera scan, voice recording, or emergency use.

Treat an indicator as useful evidence, not a reason to panic. A voice assistant, phone call, video meeting, camera preview, voice keyboard, or accessibility tool can explain it. Investigate an indicator that appears without a reasonable trigger, especially if the same app has other unexpected access.

7. Hide sensitive lock-screen notifications

A strong device lock does not help if message previews, financial alerts, one-time codes, calendar details, or health information are readable without unlocking. Android lets you hide sensitive notification content or suppress lock-screen notifications for selected apps.

Look under Settings > Notifications > Notifications on lock screen, Lock screen, or Sensitive notifications. Google's notification controls guide lists the common choices, although manufacturers can change the labels. Choose the balance that fits the phone:

• show notifications but hide sensitive content
• hide notifications from sensitive apps only
• show no lock-screen notifications

Hiding everything improves shoulder-surfing privacy but can delay important alerts. A better balance for many people is to hide content from banking, messaging, email, health, authenticator, and password apps while keeping harmless system alerts visible.

Review messaging apps separately because they can have their own preview settings. If WhatsApp is important to you, follow the broader account and link-safety steps in how to secure WhatsApp from scams and unknown links.

8. Use a real screen lock and protect recovery

Set a PIN, pattern, or password under Security, Security and privacy, or Device unlock. Google's screen-lock guidance recommends a PIN of six or more digits for added security. A password can be stronger, but the best choice is one you can enter reliably without writing it on the phone case.

Biometrics can add convenient authentication, but keep the PIN or password strong because the device still relies on it in important situations. Avoid a PIN based on birthdays, repeated digits, or obvious sequences. Never share the device unlock code with a caller claiming to be Google, a bank, or technical support.

Use passkeys for supported websites and apps when they fit your recovery plan. Passkeys can reduce phishing exposure, but you still need control of the screen lock and account recovery methods. Tutorils explains this balance in how to use passkeys safely instead of passwords.

9. Review Android ad privacy separately from Google ads

Recent Android versions with supported Google components can show Ads privacy under Settings > Google > All services > Ads. Google's current Android ad privacy guide describes Ad topics, App-suggested ads, and Ad measurement. You may turn each feature on or off and, where offered, remove or block stored topics and app suggestions.

Turning these off does not remove advertising. An app may still show contextual ads or use information under its own policies and permissions. Android ad privacy controls, a Google Account's personalised-ad settings, an app's privacy choices, and browser cookies are related but separate layers.

Review the Play Store's Data safety section before installing an app, but do not treat it as an independent audit of every behaviour. Google explains that developers provide much of this information. After installation, use Android permissions and the app's own account controls to enforce your choices.

10. Choose what your Google Account saves

Device permissions do not control all information saved to a Google Account. Open Settings > Google > Manage your Google Account > Data and privacy, or visit your Google Account in a browser. Review Google's current Activity controls for settings such as Web and App Activity, Timeline, and YouTube History.

Decide based on the benefit you actually use. Saved activity can provide recent searches, recommendations, route history, and continuity across devices. Pausing or deleting it may reduce that personalisation. The choices apply across devices signed in to the account, not just the phone in your hand.

Google is changing some Search-service history and personalisation settings gradually. If the current account screen does not match an older guide, use the explanation shown beside the control and Google's current Privacy Checkup. You can review My Activity, delete selected records, and set automatic deletion where offered. On a shared device, consider requiring extra verification before displaying complete My Activity history.

11. Keep Play Protect active

Google Play Protect checks Play Store apps before download, periodically scans installed apps, and can warn, disable, or remove software it identifies as harmful. It can also evaluate apps installed from other sources and issue privacy alerts. Google recommends keeping Scan apps with Play Protect enabled.

Open the Play Store, tap the profile icon, then Play Protect > Settings. Confirm scanning is on. Review any warning rather than dismissing it automatically. Play Protect is a useful layer, not permission to install anything. Check the developer, update history, permissions, reviews, Data safety disclosure, and the reason you need the app.

Be especially cautious with apps received through messages, file-sharing sites, or pop-ups that claim your phone is infected. Do not disable Play Protect just because an installer tells you to. If a security warning coincides with unusual battery, data, accessibility, or account behaviour, investigate the app before restoring access.

12. Configure Find Hub before the phone disappears

Find Hub can locate, ring, mark lost, or erase a supported Android device. Google says it is normally enabled when a Google Account is added, but recovery still depends on conditions such as account sign-in, the device being visible in Google Play, connectivity, location settings, and your Find Hub choices.

Check Find Hub now, while the phone is in your hand. Make sure you know which Google Account controls it and that you can sign in from another trusted device. Store account recovery codes securely away from the phone. Test the official web or app view without erasing anything.

Google's current Find Hub network can store encrypted recent locations and use end-to-end encrypted location information from a crowdsourced device network. Review the available offline-finding choice and select the balance you accept. Turning off location or related finding options can improve one privacy preference while making a lost phone harder to recover.

Remote erase is destructive and may end further location availability. Use it only after considering recovery, backups, and the risk to the data. Never sign in to Find Hub through a link sent by a stranger who claims to have found your phone.

13. Turn on backup, then understand what it covers

Android backup can preserve supported device data and settings in your Google Account. Google states that backup data is encrypted in transit and some data is end-to-end encrypted using the device screen-lock PIN, pattern, or password. Coverage varies by app, phone, account type, and Android version.

Open Settings > Google > Backup, or search Settings for Backup. Review the account, included data, last backup status, and storage. A toggle that says backup is on is not proof that every photo, download, message, authenticator, or app record can be restored.

Test the recovery plan for irreplaceable data. Keep independent copies where appropriate, and verify that encrypted app backups have their own recovery method. Tutorils has a practical guide to a free cloud-backup setup for phone and laptop files, which can help you separate device recovery from file archiving.

14. Use Private Space only for the right apps

Private Space is available on Android 15 and later on supported devices, with additional limitations based on hardware, device management, and manufacturer implementation. It creates a separate space where you can install another instance of an app and lock or hide the container.

When Private Space is locked, its apps stop foreground and background activity and cannot show their normal notifications. This is useful for apps you want separated from the main profile. It is unsuitable for an app that must deliver continuous health monitoring, emergency alerts, device-finding functions, or other background work while the space is locked.

Use a dedicated Private Space lock if the threat model justifies it, and remember its recovery consequences. Hiding the container does not make the activity invisible to every network, account provider, employer, or app service. It mainly separates apps and data on the device.

15. Preserve emergency features deliberately

Privacy settings can affect personal safety. Emergency Location Service may send enhanced location and contextual information to emergency responders when you call or text a supported emergency number. Google notes that this may occur even when the ordinary device location setting is off, depending on region, device, carrier, and emergency support.

Before disabling emergency location, earthquake alerts, crash detection, or safety sharing, understand what the feature does and whether it is available where you live. A person facing stalking or coercive control may need a different location-sharing plan from someone who travels alone and values emergency response. There is no single correct choice for both.

Review who currently receives your Google Location Sharing, Find Hub family sharing, and safety check-ins. Stop shares you no longer recognise or need. Do not assume turning off Timeline automatically stops every live location share, or that stopping a share turns off device finding.

Make privacy review a repeatable habit

Run a short review every three months, after a major Android update, after adding a high-access app, and before selling or handing down the phone. Open Privacy dashboard, Permission manager, Unused apps, Play Protect, Find Hub, Google Account Activity controls, Ads privacy, notification previews, backup status, location services, and emergency settings.

Remove apps you no longer need. Tighten permissions that no longer support a feature. Check whether a newly installed app has begun using location, camera, or microphone unexpectedly. Confirm that your recovery email, phone number, backup codes, screen lock, and off-device backups are still usable.

The strongest Android privacy setup is understandable and maintainable. Give apps access by purpose, preserve safety and recovery functions you rely on, and recheck the choices as your device and life change. That approach offers more lasting protection than copying a list of switches once and never looking at them again.