Audit what your iPhone apps can reach

What you’ll be able to do afterward

• You’ll have seen — with receipts — which apps actually use the access they hold.
• Every permission category is trimmed to apps with a working reason.
• The quiet ones (Bluetooth, Local Network) stop being a blind spot.

The quick-win playbook hit the big three in one pass. This is the full sweep, powered by the iPhone’s own surveillance-of-the-surveillers.

The plays

1. Turn on the App Privacy Report Settings → Privacy & Security → App Privacy Report → Turn On

   What this just did: started collecting the receipts. From now on the phone records which apps touched your location, mic, camera, contacts, and which domains they contacted. Come back after a few days of normal use — the rest of this playbook is better with data.

2. Read the report and pick your suspects Settings → Privacy & Security → App Privacy Report — look for access you don't remember granting and apps phoning domains you've never heard of

   What this just did: replaced guessing with evidence. The app that checked your location forty times on a day you never opened it is the one the next plays are for.

3. Sweep Location down a notch Settings → Privacy & Security → Location Services — "Always" becomes "While Using," "While Using" becomes "Ask" or "Never" unless there's a working reason; turn off "Precise" for anything that only needs the city

   What this just did: converted standing location access into on-demand access. Maps needs precise location while navigating; almost nothing else needs either.

4. Cut Photos access to Selected Settings → Privacy & Security → Photos — move "Full Access" apps to "Limited Access" (or None)

   What this just did: turned "my entire camera roll and its location metadata" into "the three photos I chose to share." The app can still do its job; it just can't browse.

5. Sweep Contacts, Microphone, and Camera Settings → Privacy & Security → Contacts / Microphone / Camera — revoke anything without an obvious working need

   What this just did: closed the classic over-asks. Your contacts are other people's data too — an app that syncs them uploads your friends, who never agreed to anything.

6. Check the quiet two: Bluetooth and Local Network Settings → Privacy & Security → Bluetooth, and → Local Network — revoke apps with no obvious hardware or home-device reason

   What this just did: trimmed the permissions nobody reads. Bluetooth and local-network access are used for proximity and home-network scanning — location tracking's quieter cousins — and most apps holding them have no business there.

7. Re-check the tracking switch Settings → Privacy & Security → Tracking — "Allow Apps to Request to Track" off, and clear any per-app allowances listed

   What this just did: re-confirmed the master switch from the quick-win and caught any app you'd said yes to before flipping it. Belt, meet suspenders.

You’re now covered against…

• Standing surveillance — no app holds always-on access to where you are, what you say, or what you shot.
• The contact-list harvest — your friends stop being your apps’ product.
• The quiet channels — Bluetooth and local-network scanning trimmed to hardware that’s actually yours.

Twenty minutes now, then five minutes whenever the App Privacy Report surprises you. The report is the habit; the sweeps are just what it tells you to do.

Progress is saved only on this device. It never leaves your phone.