Six Phone Settings That Actually Protect Your Privacy
Most of us carry a small tracking device in our pockets and never adjust a single default. Here is what to switch on, what to switch off, and why it matters.
Key points
- Deleting unused apps removes hidden data collection that continues even when you never open the app.
- Multi-factor authentication, a second login check sent to your phone or email, blocks most account takeovers even when a password is stolen.
- Location and ad-tracking settings are turned on by default on most phones and can be switched off in under two minutes.
- Keeping your phone's operating system updated closes security gaps that criminals actively search for and exploit.
Your phone knows your location, your bank, your health records, and your private messages. Most of it ships with the least private settings already switched on, waiting for you to notice.
NBC News Tech recently covered the basics, and they are worth spelling out plainly.
What should I actually do first?
Start with two things: delete apps you no longer use, and turn on multi-factor authentication (MFA) for every account that matters.
Unused apps are a quiet problem. An app you downloaded for a festival two years ago may still run in the background, collecting your location and browsing habits and sending them to a company you have forgotten exists. Deleting it stops that cold.
MFA is a second check when you log in, usually a short code sent to your phone or email. Even if a criminal gets hold of your password, they cannot get into your account without that second code. Enable it on your email first, then your bank, then everything else.
Which settings are tracking me right now?
Probably more than you expect. Both Android and iPhone have a settings screen dedicated to location permissions. Many apps request "always on" location access when they only need it while you are actively using them. Change these to "only while using the app" or "never" for anything that has no obvious reason to know where you are.
Advertising tracking is a separate switch. On iPhone it sits under Settings, then Privacy and Security, then Tracking. On Android the path varies by manufacturer but look under Privacy in your main settings menu. Turning it off does not eliminate all ads, but it does stop your phone building a detailed profile of your behaviour to sell to advertisers.
Should I be worried about my passwords?
Yes, but the fix is straightforward. Reusing the same password across multiple sites is the single habit criminals count on most. When one site is breached and passwords leak, automated tools try those same credentials on banks, email accounts, and shopping sites within hours.
A password manager, which is an app that generates and remembers a unique strong password for every site, solves this without any memorisation. Your phone's built-in option (iCloud Keychain on iPhone, Google Password Manager on Android) is free and works well.
Software updates matter too. When your phone asks you to install an update, that update usually patches specific security flaws that researchers (or criminals) have already found. Delaying it leaves a known door unlocked.
Common questions
Will turning off tracking break apps I use every day?
Rarely. Maps and delivery apps need location while you use them, and the "while using" setting keeps that working. Restricting background tracking mainly affects advertising networks, not the core features of apps you rely on.
How long does all of this take?
A focused twenty minutes covers the main changes: delete old apps, enable MFA on email and banking, review location permissions, and turn off ad tracking. Updating your phone can run overnight on Wi-Fi.
