10 Android privacy settings to change now
Most people install an app, tap 'Allow' on every permission prompt, and never look again. That's how apps quietly hoover up your location at 2 am, why your microphone gets accessed by a game you forgot you downloaded, and how a lost or stolen phone can hand a stranger access to your whole Google account. None of it has to happen. Android gives you the tools. You just need to know where they are and what to do with them.
Find the privacy settings hub on your Android phone
Every privacy control on Android flows from one central menu. On Pixel it's Settings, then Security and Privacy, then Privacy. Samsung takes you to Settings, then Security and Privacy, then More Privacy Settings. Other brands use labels like Passwords and Security or Privacy Protection, but they all reach the same underlying Android controls.
- Open the Settings app on your Android phone.
- On Pixel devices, tap Security and Privacy, then Privacy.
- On Samsung Galaxy, tap Security and Privacy, then More Privacy Settings to reach both Google and Samsung-specific options.
- On Xiaomi, OnePlus, or other brands, look for Passwords and Security or Privacy Protection. Different label, same destination.
Gotchas
- Menu labels vary by manufacturer and Android version, so the exact wording in your Settings may not match guides written for a different phone.
- Phones on Android 10 or 11 may not have a dedicated Privacy dashboard inside this menu.
Use the Privacy Dashboard to see exactly which apps accessed your camera, mic, and location
The Privacy Dashboard gives you a time-stamped log of every app that touched your location, camera, or microphone. It makes background app behaviour visible rather than invisible, and lets you cut off access in seconds.
- Go to Settings, then Security and Privacy, then Privacy, then Privacy Dashboard.
- Review the permission categories (Location, Camera, Microphone) and the timestamps next to each one.
- Tap any category to see which specific apps accessed it and when.
- Tap an app in the list to change its permission to Allow, Allow Only While Using the App, Ask Every Time, or Don't Allow.
How to verify it worked
Return to the Privacy Dashboard after a few hours of normal use. If you revoked a permission, that app should no longer appear in the access log for that category.
Gotchas
- Android 12 shows 24 hours of history. Android 13 and later extends that to 7 days.
- The Privacy Dashboard is not available on Android 11 or below.
Audit every app permission with Permission Manager
Permission Manager lets you look at who has access to what, flipping the usual view from per-app to per-permission. You'll often find apps with camera or microphone access that have no reason to have it, and revoking them takes one tap.
- On Pixel: Settings, then Privacy, then Permission Manager.
- On Samsung: Settings, then Security and Privacy, then More Privacy Settings, then Permission Manager.
- Choose a permission type such as Camera, Microphone, or Location.
- Review the Allowed, Allowed Only While In Use, and Not Allowed categories, and adjust each app as needed.
Gotchas
- Some system apps cannot have permissions revoked regardless of what you set here.
- Revoking a permission may break functionality in apps that legitimately need it, so test after making changes.
Enable the global camera and microphone kill switches
Android lets you disable the camera and microphone for every app at once with a single toggle. When either is active, a green dot appears in the corner of your screen as a live alert. Flip the switch and nothing can access those sensors until you turn it back on.
- Open Settings, then Privacy.
- Tap Camera Access and toggle it off. Do the same for Microphone Access.
- A green indicator dot will appear whenever an app actively uses the camera or microphone, letting you catch surprise activity in real time.
- On Samsung, pull down the notification shade and tap the green dot to see which app is responsible, then close or restrict it.
Gotchas
- Disabling camera access globally stops all camera apps and video calling until you re-enable it.
- Not every Android skin includes these global toggles. If you don't see them, check your device's specific Privacy menu.
Enable and run Google Play Protect to scan for malicious apps
Play Protect scans every app on your device automatically, checking for malware, harmful behaviour, and policy violations. It runs in the background, but you can also trigger a manual scan any time you're suspicious.
- Open the Google Play Store and tap your profile icon in the top-right corner.
- Tap Play Protect.
- If it's not already active, tap the settings gear and turn on Scan Apps with Play Protect.
- Tap Scan to run an immediate check of every installed app.
How to verify it worked
After the scan completes, the Play Protect screen will show a 'No harmful apps found' message, or it will list any flagged apps and offer removal options.
Gotchas
- Play Protect can't scan sideloaded apps from outside the Play Store unless you explicitly allow it to check unknown apps.
- A clean result means no known threat signatures were matched, not that every app is categorically safe.
Check for signs your Android phone is being monitored or compromised
Unusual battery drain, unexpected data usage, unfamiliar apps, and sluggish performance can all indicate something is running on your phone that shouldn't be. A few quick checks narrow down whether you have a problem.
- Dial *#21# to check whether your calls or data are being forwarded to another number. Dial ##002# to clear all forwarding rules (availability varies by UK carrier).
- Go to Settings, then Apps, and scroll through for anything unfamiliar or that you didn't install.
- Check Settings, then Battery, then Battery Usage for apps consuming power in the background without obvious reason.
- Review Settings, then Network, then Data Usage for apps sending unusually large amounts of data.
- Run a Google Play Protect scan as described in tip 5.
Gotchas
- USSD codes vary by network operator. Not all codes work on all UK carriers, so a blank response doesn't always mean nothing is set.
- These checks surface indicators, not definitive proof. Spyware installed with physical access may not appear as a visible app.
Review and remove trusted devices and linked Google account access
Every device signed into your Google account can access your data and maintain an active session. If you've sold an old phone, shared an account, or lost a device, revoking those sessions is the fastest way to cut off unwanted access.
- Open Settings, then Google, then Manage Your Google Account, or visit myaccount.google.com.
- Tap Security, then Your Devices, and review every device listed.
- Tap any device you don't recognise or no longer own and select Sign Out.
- Under Security, then Third-Party Apps with Account Access, revoke any apps you no longer use or trust.
Gotchas
- Removing a trusted device ends the session but does not remotely wipe the device.
- Enterprise-managed devices may be re-added automatically by an IT administrator.
Control your caller ID and hide your number for private calls
You can prevent your phone number from showing when you call someone, either permanently via your Phone app settings or on a per-call basis by prefixing the number with 141 in the UK. To undo a previously set private number, return to the same menu and select Show Number, or dial #31#.
- Open the Phone app, tap the three-dot menu or More, then Settings, then Calls.
- Tap Additional Settings (or Supplementary Services on some devices), then Caller ID.
- Select Hide Number to withhold your number by default, or Show Number to display it.
- For a single private call, prefix the number with 141 before dialling (UK standard).
- To deactivate a previously withheld number setting, go back to the same menu and select Show Number, or dial #31# (varies by carrier).
Gotchas
- Emergency services (999 and 112) can always identify your number regardless of caller ID settings.
- Many businesses and individuals don't accept calls from withheld numbers.
- Network-level caller ID suppression set by your carrier may override what's configured in the phone app.
Use Android 15 Private Space to create a fully isolated second profile
Private Space, available from Android 15 onwards, creates a completely separate environment on your phone with its own apps and accounts. Lock it and it disappears from your app drawer entirely. Nobody browsing your phone will find it.
- Confirm your device is running Android 15 or later (check Settings, then About Phone, then Android Version).
- Open Settings, then Security and Privacy, then Private Space.
- Follow the setup wizard to create the isolated space and set a separate lock method.
- Install sensitive apps inside Private Space. When the space is locked, those apps don't appear in your main app drawer.
Gotchas
- Private Space is exclusive to Android 15 and later. Older devices, even with recent security patches, won't have this option.
- Enterprise or work device policies may restrict or completely disable Private Space.
Keep Android and your apps updated to close security vulnerabilities
Security patches fix the specific vulnerabilities attackers exploit. Running an outdated build isn't just suboptimal, it's one of the most common reasons phones get compromised. Updates take minutes and close doors that would otherwise stay open indefinitely.
- Open Settings, then System, then Software Update (or System Update), and tap Check for Updates.
- Install any available Android security patches immediately.
- Open the Google Play Store, tap your profile icon, then Manage Apps and Device, then Update All.
- Enable automatic app updates: Play Store, then Profile, then Settings, then Network Preferences, then Auto-Update Apps.
Gotchas
- Older devices may stop receiving Android security updates from the manufacturer even while the hardware still works fine.
- Automatic app updates can occasionally introduce new permissions. Check changelogs for significant apps after updates.