The 15-Point Privacy Checklist Before You Install a New Mobile App
Most apps get installed in under thirty seconds. A permission prompt lands mid-task, you tap Allow because you are busy, and the details get sorted out later — except later almost never comes. Two years on, that app still knows roughly where you are, still has your contacts, and you have no memory of agreeing to anything.
Fixing that takes about ten minutes per app, and none of it requires technical skill. Here is the review to run before you tap Install, plus a few habits for the weeks after.
Read the Store Page Before the Install Button
The store listing is the cheapest place to reject an app, so spend a minute there. Tap the developer name and see what else they publish. An unfamiliar company with forty near-identical utility apps tells you something about how the business makes money.
Then open the privacy section of the listing — Apple calls it App Privacy, Google Play calls it Data safety. You want two lines in particular: what data is linked to you, and what is used to track you. If that list is longer than the app's actual function, close the tab.
Check the last update date and skim the reviews for words like "scam", "cancel", "refund" and "can't delete my account". Finally, read the subscription terms before you install, not after the free trial ends.
The 15-Point Checklist
- Match permissions to purpose. A note-taking app needs storage. It does not need your contacts, your microphone and your location. If the purpose and the permission don't line up, that is the answer.
- Refuse "Always" location. Choose "While Using" and let it ask again when you reopen it. If the app offers approximate location, take it — a weather app does not need your street address.
- Grant permissions in context, not upfront. Decline anything you don't need on day one. You can always enable it later in your phone's settings, and most apps work fine without it.
- Leave notifications off at install. Prompts arrive early because acceptance rates are highest then. Turn them on when you actually want them, and hide message previews on the lock screen.
- Check background activity. Background App Refresh on iOS and background data on Android let an app wake up and transmit while you're not using it. Switch off anything that doesn't need to run constantly.
- Question Bluetooth and "Nearby Devices". Reasonable for pairing a speaker or finding a tracker. Less reasonable for a shopping app that wants to sense which devices are around you.
- Compare the label to the request. The privacy label claims no location data; the app immediately asks for location. Contradictions are a reason to uninstall.
- Watch for tracking prompts. When iOS asks whether an app may track you across other companies' apps and websites, choose "Ask App Not to Track" unless you have a clear reason. On Android, opt out of ads personalisation in your Google settings.
- Find out who else receives your data. Search the privacy policy for "share", "partners" and "advertising". A short list of named categories is normal. A vague sentence about "trusted third parties" is not an answer.
- Use a shielded sign-in. Where offered, use a masked email or an alias instead of your primary address, and don't link a social profile you'd rather keep separate from this account.
- Trim your profile. Turn off "discoverable by phone number" and "discoverable by contacts" if you don't need them, and think twice before adding a photo of yourself, your workplace or your children.
- Switch on two-factor authentication for anything holding messages, money, health records or work files. An authenticator app is more robust than SMS codes. For health or financial apps, treat the app as you would any other professional service and seek qualified advice about what you share.
- Learn the deletion path now. Open settings and find "Delete account" before you need it. If the only route is an email to support, save that address today. Retention clauses are normal, but the policy should state how long data is kept.
- Export or screenshot what matters. Deleting an account usually deletes the data with it, and there is often no undo. Save receipts, exported files or chat history first.
- Remove the payment method when you're done. Deleting the app does not cancel a subscription — you cancel it in the App Store or Google Play. After canceling, remove the stored card.
Red Flags Worth Acting On
Some patterns justify an immediate uninstall. An app that demands an account before showing you a single feature. A free utility that asks for full bank credentials, or for your online banking password rather than a secure bank-approved connection. A flashlight that wants your contacts. A privacy policy with no named company, no address and no way to contact anyone.
If an app can't explain a permission in one plain sentence, grant nothing and look for something else.
The Thirty-Day Review
Permissions drift. Apps update, features change, and something you approved in March may be doing more in September. Once a month, open your phone's privacy settings — Permission manager on Android, Privacy & Security on iOS — and look at which apps have access to location, microphone, camera and contacts. Revoke the ones you've stopped opening, and delete the apps you haven't touched in a month.
Do the same for connected accounts. Google, Apple and social platforms all list which third-party apps can access your profile, and clearing out old ones takes two minutes.
Keep It Short and Repeatable
You don't need to audit every app you own. You need a habit: read the label, question the permissions, find the delete button, and review the list once a month. Ten minutes before an install is far cheaper than discovering, years later, that an app you barely used still has your contacts and a live subscription. Say no at the store page — that is the one decision you never have to revisit.
Photo: Tumisu / Pixabay
