How to Protect Your Privacy on Android

Android powers over three billion devices worldwide, and every one of them is collecting data by default. From location history and app usage to advertising profiles and voice recordings, your Android phone can quietly accumulate a detailed picture of your life. The good news: Android now offers more privacy controls than ever. Here is how to use them.

Start with the Privacy Dashboard

Android 12 introduced the Privacy Dashboard, and it has only gotten better with Android 14 and 15. This is your single-pane view of which apps accessed sensitive permissions — location, camera, microphone, contacts, and more — and when they did it.

To access it, go to Settings > Security & Privacy > Privacy Dashboard. You will see a timeline of permission usage over the past 24 hours (or up to 7 days on Android 15). If you spot an app accessing your microphone or location when it had no reason to, tap it and revoke the permission immediately.

Lock Down App Permissions

Permissions are the gateway between your data and third-party apps. Android gives you granular control, but most people never revisit the defaults after tapping "Allow" during setup.

Review Permissions by Category

Go to Settings > Security & Privacy > Permission Manager. This groups permissions by type — Location, Camera, Microphone, Contacts, Files, Calendar, and more. Tap each category and audit which apps have access. For most apps, the correct setting is one of:

• Allow only while using the app — the best default for location-dependent apps like maps and ride-sharing.
• Ask every time — ideal for camera and microphone access, forcing apps to request permission each session.
• Don't allow — for any permission that is not essential to the app's core function.

Be Skeptical of Background Location

Background location access lets apps track you even when you are not using them. Very few apps genuinely need this. Weather apps, navigation apps, and fitness trackers may have a case. A flashlight app or a game does not. If an app requests background location, deny it and see if the app still works. In most cases, it will.

Control Google's Data Collection

Google is the biggest data collector on your Android device, and it provides controls to limit what it stores — but none of them are turned off by default. You need to do this manually.

Disable Activity Controls

Go to Settings > Google > Manage your Google Account > Data & Privacy > Activity controls. Here you will find toggles for:

1. Web & App Activity — logs your searches, browsing, and app usage across Google services. Pause this to stop the collection.
2. Location History (Timeline) — records everywhere your device goes, even when you are not using Google Maps. Turn this off.
3. YouTube History — tracks your watch and search history on YouTube. Pause it or set it to auto-delete after 3 months.

For each of these, you can also tap Auto-delete and set Google to purge stored data after 3 or 18 months if you prefer to keep them partially active.

Delete Stored Activity Data

Pausing activity controls only stops future collection. To remove what Google has already stored, visit myactivity.google.com from your phone's browser, tap Delete activity by, and select All time. This clears your search history, location history, voice recordings, and YouTube activity in one step.

Eliminate Ad Tracking

Android assigns every device an Advertising ID that apps and ad networks use to build a profile of your interests and behavior. You can and should remove it.

Go to Settings > Security & Privacy > Ads (on some devices: Settings > Google > Ads). Tap Delete advertising ID. This prevents apps from using a persistent identifier to track you across services. On Android 15, you can also disable individual ad-privacy signals:

• Ad topics — stops Android from sharing your interest categories with apps.
• App-suggested ads — prevents apps from building a profile based on your in-app behavior.
• Ad measurement — blocks limited data sharing with advertisers for conversion tracking.

Disable all three for maximum protection.

Tighten Location Settings

Location data is among the most sensitive information your phone collects. Beyond app-level permissions, there are system-level settings that quietly contribute to location tracking.

Go to Settings > Location and review:

• Wi-Fi scanning and Bluetooth scanning — these allow your phone to detect nearby networks and devices for location accuracy, even when Wi-Fi and Bluetooth are turned off. Disable both under Location > Location services.
• Google Location Accuracy — uses Wi-Fi, cell towers, and sensors to improve location precision. Turning this off limits location to GPS only, which is less accurate indoors but shares far less data with Google.
• Location-based ads — on some devices, this appears under Location services. Toggle it off to prevent ad networks from using your physical position.

Use Android 15's Private Space

Android 15 introduced Private Space, a separate, locked profile within your device that can hold sensitive apps behind an additional layer of authentication. Apps installed in Private Space do not appear in your main app drawer, recent apps, or notifications unless you unlock the space.

To set it up, go to Settings > Security & Privacy > Private Space. You can use a different Google account (or no account) inside Private Space, keeping that activity completely separate from your primary profile. This is useful for banking apps, health apps, or anything you want isolated from your main environment.

Install Privacy-Focused Apps

The apps you use daily have a bigger impact on your privacy than any single setting. Consider swapping defaults for privacy-respecting alternatives:

• Browser: Replace Chrome with Brave or Firefox (with Enhanced Tracking Protection enabled). Both block trackers and ads by default.
• Search: Switch to DuckDuckGo or Startpage as your default search engine to stop feeding queries to Google.
• Messaging: Use Signal for end-to-end encrypted conversations. It collects virtually no metadata.
• Email: Proton Mail offers end-to-end encryption and is based in Switzerland, outside US and EU data-sharing agreements.
• VPN: Proton VPN (free tier available) or NordVPN encrypts your internet traffic and hides your IP address from websites and your ISP.

Additional Hardening Steps

Once you have covered the essentials, these extra measures further reduce your exposure:

1. Enable Advanced Protection Mode — available on Android 15 under Settings > Security & Privacy, this restricts app installs to the Play Store only, enables stronger malware scanning, and blocks unauthorized sideloading.
2. Turn off cloud backups selectively — Google backups are convenient but store app data, Wi-Fi passwords, and call history on Google's servers. Review what is backed up under Settings > Google > Backup.
3. Use a DNS-based ad blocker — Android 9 and later support Private DNS. Set it to dns.adguard.com or one.one.one.one (Cloudflare) under Settings > Network & Internet > Private DNS to block trackers at the network level.
4. Review app access to notifications — some apps request notification access to read all your incoming notifications, including messages and two-factor codes. Audit this under Settings > Apps > Special app access > Notification access.

Protect the Data That Is Already Out There

Configuring your Android device is an important first step, but it only controls what happens going forward. If your personal details are already circulating on data broker sites, people-search engines, and marketing databases, no phone setting can pull that information back.

This is where a data removal service becomes essential. PrivacyOn scans over 100 data broker sites for your personal information, submits removal requests automatically, and monitors continuously to catch re-listings. Plans start at $8.33 per month and include family coverage for up to 5 people — a practical complement to the device-level protections covered in this guide.

Privacy on Android is not a single switch. It is a combination of settings, habits, and tools working together. Start with the steps above, revisit your permissions regularly, and pair device-level controls with active data removal for a genuinely comprehensive approach.