Cybersecurity › Module 5 › Lesson 5
App Permissions on Your Phone
Learn which app permissions to allow and which to block
Opening
Why does that app need your camera?
You download a flashlight app. It asks for permission to access your camera, contacts, and location. Why? A flashlight doesn't need your contacts. Many apps ask for more permissions than they actually need. Some do this on purpose. Understanding app permissions is your first line of defense.
1. What are app permissions?
App permissions are requests for access to your phone's sensitive data. When you install an app, it asks: 'Can I use your camera? Can I see your location? Can I read your contacts?' You have the power to say yes or no.
Your phone has sensors and data that are valuable: camera, microphone, location, photos, contacts, call logs, and more. Apps need permission to use them. This is actually a good system — it gives you control.
2. Which permissions are risky?
Some permissions reveal a lot about you. Be careful with these:
Location
Apps can track where you are, where you go, and where you live. A weather app needs location. A game does not. Only allow location for apps that truly need it.
Camera and Microphone
A video call app needs these. A note-taking app does not. If an app asks for camera or microphone access, ask yourself: 'Why?' If you can't think of a reason, deny it.
Contacts and Call Logs
Some apps want to read your phone book. This helps them build a profile of who you know. Social media apps sometimes ask for this. You can usually say no.
Photos and Files
An editing app needs access to your photos. A random game does not. Attackers sometimes use this to steal personal photos or documents.
Calendar and SMS
Your calendar reveals your schedule and habits. Your SMS (text messages) contain sensitive information. Very few apps need these. Deny them unless essential.
Real example: The fake job interview app
A student in Dhaka downloaded an app for 'interview coaching.' It asked for permission to: location, camera, microphone, contacts, photos, and call logs. None of these were necessary for text-based coaching. She denied all of them. The app was likely designed to collect data or spy on users. Trust your instinct — if an app asks for too much, it's suspicious.
3. How to manage app permissions
Take control right now:
Android: Settings > Apps > [App Name] > Permissions
See what each app can access. Toggle off any permission you don't recognize or need.
iPhone: Settings > Privacy
You'll see categories like Location, Camera, Microphone, Photos. Tap each one to see which apps have access.
Deny by default
When installing a new app, deny all permissions at first. If the app doesn't work, grant the permission it actually needs.
Review old apps
Check apps you installed months or years ago. Many still have permissions you granted and forgot about.
Permission vs. App behavior
An app with permission to access your location doesn't automatically mean it's tracking you right now. But it *could* at any time. By limiting permissions, you reduce the damage if an app is compromised or turns out to be malicious. Think of it as closing doors in your house — less access means fewer entry points for intruders.
You're the owner of your phone and your data. Apps work for you, not the other way around. If an app asks for permission you don't understand or don't trust, you can deny it. If the app doesn't work, uninstall it and find another one.
Quick check: Is this permission reasonable?
Ask yourself three questions: (1) Does this app actually *need* this permission to work? (2) Would a similar app ask for it? (3) Do I trust this developer? If you answer 'no' to any of these, deny the permission.