How to Stop Apps From Tracking You on Android (2026): Privacy Dashboard, Permissions & Ad Tracking

By Auraz Tech Editorial Team | October 2026

You install a free photo editor. Two weeks later you search for shoes on Google, and suddenly every app shows you shoe ads. You never told the photo editor where you live, yet a weather widget knows your street. This is not a coincidence and it is not magic — it is app tracking, and it runs on the permissions you tapped Allow on without reading. The good news: Android now ships with serious anti-tracking tools, and most of them take under a minute to turn on. This guide walks you through how apps track you in the first place, the 2-minute Privacy Dashboard audit that shows exactly who is watching, taking back app permissions one by one, locking down location, camera and microphone, deleting your advertising ID and turning off ad personalization, stopping background data slurping, and the habits that keep you clean afterward. You do not need any third-party privacy app — everything here is already in your phone's settings.

How Apps Actually Track You (The 30-Second Version)

Tracking on Android is not one thing — it is four different pipes, and you can close each of them:

• Permissions. Every time you tap Allow on a permission request, that app gets a key to part of your phone: your location, contacts, microphone, camera, files, call logs. Many apps ask for keys they do not need — a torch app has no business knowing your location. This is the biggest and easiest pipe to close.
• Advertising ID. Android gives every phone a resettable advertising identifier that ad networks use to stitch your behavior across apps into one profile: the games you play, the shops you browse, the news you read. You can delete it entirely in settings.
• Background data collection. Some apps keep phoning home with analytics and location even when you are not using them, quietly burning your mobile data and battery while they do it.
• Google account activity. Location History, Web and App Activity and ad personalization in your Google account build a profile from searches, Maps trips and YouTube watches — separate from apps, and controlled in your Google account settings.

The rest of this guide closes these pipes in order of impact. Start at the top: the first two sections alone remove the vast majority of tracking for most people.

The 2-Minute Privacy Audit: Open Your Privacy Dashboard

Before changing anything, look at what is actually happening. Android 12 and newer include a Privacy Dashboard — a timeline showing exactly which apps touched your location, camera and microphone in the last 24 hours:

1. Go to Settings > Security and privacy (on Samsung: Settings > Security and privacy > Privacy; on Xiaomi/HyperOS: Settings > Privacy protection; on older phones: Settings > Privacy).
2. Tap Privacy dashboard.
3. You will see three bars: Location, Camera, Microphone. Tap each one to see the list of apps that accessed it, with timestamps.
4. Tap any app in the list to jump straight to its permission page and revoke what you do not like.

Most people find at least one surprise here — a shopping app that checked location at 3 AM, a game that touched the microphone, a utility app reading the camera roll. Note the offenders; the next section takes their keys away. Also watch for the green dot in your status bar: Android shows it whenever any app is actively using your camera or microphone right now. Swipe down on it to see which app — if you do not recognize it, that is an immediate red flag (see our guide to checking if your phone is compromised).

Take Back App Permissions (Permission Manager)

This is the single most powerful thing you can do. The Permission Manager shows every permission on your phone and which apps hold it, so you can revoke access in bulk:

1. Go to Settings > Security and privacy > Privacy > Permission manager (on some phones: Settings > Apps > Permission manager).
2. Tap a permission — start with Location. You will see every app that has it, grouped by Allowed all the time, Allowed only while in use, and Not allowed.
3. Tap any app that should not have it and change it to Don't allow or Ask every time.
4. Repeat for Camera, Microphone, Contacts, Call logs, SMS, Files and media, and Nearby devices.

The rule of thumb is simple: the permission must match the app's job. WhatsApp needs the microphone (voice notes) and contacts. Your banking app needs the camera (scanning cheques) but not your location all the time. A wallpaper app needs none of these. When an app asks for something odd, deny it — if the app truly needs it, it will ask again the moment you use the related feature, and you can grant it then. Two modern Android features make this nearly painless:

• One-time permissions. When an app asks for location, camera or microphone, choose Only this time. The permission dies when you close the app — perfect for a food delivery app that needs your address once.
• Approximate location. When granting location, pick Approximate instead of Precise whenever the app allows it. A weather app works fine knowing your city; it does not need your street.
• Auto-reset. Since Android 11, permissions are automatically revoked for apps you have not opened in a few months. Leave this on — it silently cleans up the apps you forgot about.

Brand-specific paths, since manufacturers rename everything:

• Samsung (One UI): Settings > Security and privacy > Privacy > Permission manager.
• Xiaomi / Redmi / Poco (HyperOS/MIUI): Settings > Privacy protection > Manage > App permissions — also check the per-app autostart and background lists while you are there.
• Oppo / Realme: Settings > Privacy > Permission manager.
• Vivo / iQOO: Settings > Privacy > Permission management.
• Infinix / Tecno: Settings > Privacy > Permission manager.
• Stock Android (Pixel, Motorola, Nokia): Settings > Security and privacy > Privacy > Permission manager.

Lock Down Location, Camera and Microphone

These three sensors reveal the most about your life — where you go, what you say, what you see — so they deserve their own pass:

• Location: downgrade to "only while in use." In Permission manager > Location, move every app you can from Allowed all the time to Allowed only while in use. "All the time" means the app can track where you go 24 hours a day, even at 3 AM — almost no consumer app needs this. Navigation and ride-hailing apps work perfectly on "only while in use."
• Kill the master switches when you need silence. Quick settings has Camera access and Mic access tiles (add them via the edit button if missing). Tapping one cuts that sensor off for every app instantly — handy before a private meeting, and a fast way to test whether an app misbehaves without the mic.
• Watch the indicators. The green camera/mic dot in the status bar is your early-warning system. If it lights up while you are doing nothing, swipe down, identify the app, and revoke its permission on the spot.
• Turn off Google Location History. This is separate from app permissions: open Google Maps > your profile picture > Your timeline, or go to myactivity.google.com, and pause Location History. Also review Web and App Activity there — it can store location-tagged searches even with Location History off.

One honest note: with location fully denied, ride-hailing and delivery apps will ask for it every time — that friction is the point. Grant it one-time, and they get your address without getting your life.

Delete Your Advertising ID and Turn Off Ad Personalization

The advertising ID is the string of characters that lets ad networks recognize your phone across different apps and build one profile from all of them. Android now lets you delete it entirely:

1. Go to Settings > Security and privacy > More privacy settings > Ads (on Samsung: Settings > Security and privacy > Privacy > Ads; on older phones: Settings > Google > Ads).
2. Tap Delete advertising ID and confirm. Apps immediately lose the identifier they used to profile you across apps.
3. On the same screen, turn off ad personalization / personalized ads where offered.

Then handle the Google-account side, which is separate from the phone: visit myadcenter.google.com (or Google app > profile > Manage your Google Account > Data and privacy > My Ad Center) and turn off Personalized ads. This stops Google from tailoring ads from your Search, YouTube and Maps activity. What changes afterward: you will still see ads in free apps — they pay the developers' bills — but they will be generic instead of eerily specific. The shoe ads after the shoe search stop following you around. If you want to go further on the ads front, our guide to blocking ads on Android covers system-wide approaches.

Stop Background Tracking and Data Slurping

Revoked permissions stop direct access, but some apps still phone home with analytics, device info and approximate location from IP address. Cut the background chatter:

• Restrict background data for data-hungry apps. Go to Settings > Apps, tap the app, then Mobile data, and turn off Allow background data usage for apps that have no business syncing when closed — games, photo editors, shopping apps. They still work fine when you open them.
• Uninstall what you do not use. Every unused app is a tracker you are carrying for free. That random "QR scanner" or "free VPN" from 2024 is still on your phone with whatever permissions you granted it. Long-press, uninstall, done.
• Be ruthless with free VPNs and cleaners. A free VPN sees all your traffic by design — a shady one is the worst tracker you can install. The same goes for "RAM booster" and "battery saver" apps, which exist mainly to show ads and harvest data. Use our proper speed-up guide instead of cleaner apps, and only use VPNs from companies with a real reputation.
• Install from the Play Store only. Sideloaded APKs bypass Play Protect's malware and tracker screening entirely. Our safe APK guide explains the rare cases where sideloading makes sense — for everything else, the Play Store's Data safety section on each app's listing tells you upfront what data the app collects, which is worth reading before you install.
• Turn on Play Protect scans. Play Store > profile picture > Play Protect > settings gear — make sure Scan apps with Play Protect is on. It periodically checks installed apps for known spyware behavior.

Close the Sneaky Side Doors: Clipboard, Notifications and Accessibility

Most people audit the big permissions and stop. Three quieter access types deserve a look:

• Clipboard. Android 12+ shows a toast ("App pasted from your clipboard") whenever an app reads what you copied — passwords, OTPs, bank details. If an app you do not trust keeps reading your clipboard, that is a red flag; stop copying sensitive text while it is open, and consider replacing the app.
• Notification access. Some apps ask for Notification access or Notification listener permission, which lets them read every notification you receive — including OTP codes and message previews. Only grant this to apps you deeply trust (like a smartwatch companion). Check who has it: Settings > Apps > Special app access > Notification access (or search "notification access" in Settings).
• Accessibility services. Accessibility is the most powerful permission on Android — it can read your screen and tap buttons for you. Malware and aggressive adware abuse it constantly. Check Settings > Accessibility and remove anything you do not recognize or no longer use. A flashlight app with accessibility access is not a flashlight app — it is spyware wearing a costume.
• Usage access and "display over other apps." In Settings > Apps > Special app access, review Usage access (sees which apps you open and when) and Display over other apps (can draw on top of your banking app). Revoke both from anything that does not clearly need them.

Use Private DNS for Network-Level Blocking

Permissions control what apps can read on your phone, but trackers also live on the network — inside websites and inside the ad SDKs apps bundle. Private DNS encrypts your DNS lookups and, with the right provider, blocks known tracker and ad domains for every app at once, no root needed:

1. Go to Settings > Network and internet > Private DNS (Samsung: Settings > Connections > More connection settings > Private DNS).
2. Select Private DNS provider hostname and enter a filtering provider's hostname — popular free options include dns.adguard-dns.com (AdGuard's ad/tracker blocking DNS) or one.one.one.one (Cloudflare's fast private DNS, no filtering).
3. Tap Save. It applies system-wide in seconds.

Our full Private DNS setup guide walks through providers and troubleshooting. Caveat: DNS filtering blocks tracker domains, not in-app SDKs that phone home directly by IP — it is a strong extra layer, not a replacement for the permission work above.

Staying Clean: The 5-Minute Monthly Habit

Tracking creeps back — apps update, you install new ones, permissions get re-granted in a hurry. A tiny routine keeps you ahead of it:

• Monthly Privacy Dashboard check. Once a month, spend two minutes in the Privacy Dashboard looking at the last 24 hours. New offenders stand out immediately.
• Audit after every new install. When you install an app, open its App info > Permissions right after setup and strip everything non-essential before you forget.
• Read the Data safety section. Before installing anything new, scroll to Data safety on its Play Store page. If a simple app lists "location, contacts, and browsing history collected," pick a competitor.
• Keep the OS updated. Every Android version since 10 has added privacy controls — one-time permissions, approximate location, the dashboard itself, auto-reset. A phone stuck on an old version is missing the tools in this guide. Check Settings > System > System update.
• Delete accounts you abandoned. Uninstalling an app does not delete the account and profile the company built on you. For apps you quit, log in on their website once and delete the account — it is the only way to make the data actually go away.

None of this makes you invisible — a determined tracker with your IP address and device fingerprint can still make guesses. But it removes the easy, industrial-scale tracking that turns your phone into a data firehose: the background location pings, the cross-app ad profile, the microphone access you never knowingly granted. That is 95% of the real-world problem, and it costs you nothing but twenty minutes today and two minutes a month.

FAQ

How do I know which apps are tracking me on Android?

Open Settings, Security and privacy (or Privacy), then Privacy dashboard. It shows a timeline of which apps accessed your location, camera and microphone in the last 24 hours. Tap any permission to see the full list of apps that used it and exactly when. That one screen tells you more about who is tracking you than anything else on your phone.

Should I delete my advertising ID on Android?

Yes, if you want less personalized tracking. Go to Settings, Security and privacy (or Google), Ads, and choose Delete advertising ID. Apps can no longer use that identifier to build an ad profile on you. You will still see ads in free apps, but they will be generic instead of based on your tracked behavior. This is free and takes ten seconds.

Is it safe to deny permissions to apps?

Yes. Denying a permission only stops that specific access — the app keeps working otherwise. A flashlight app denied location access still turns on the light; a photo editor denied contacts still edits photos. If an app genuinely needs a permission, it will ask again when you use the related feature, and you can allow it just for that moment. When in doubt, deny, and allow later only if something breaks.

Why does a game need my location and contacts?

It does not. Games and simple utility apps ask for location, contacts or microphone access because that data is valuable to advertisers and data brokers, not because the app needs it to work. This is the single biggest red flag on Android: if the permission has nothing to do with the app's job, deny it. Android 11 and newer also auto-reset permissions for apps you have not opened in a few months, which silently revokes exactly this kind of overreach.

Does turning off location history stop Google from tracking me?

Turning off Location History stops Google from saving a timeline of where you have been in your Google account, but it does not stop all location collection. Web and App Activity can still store location-tagged searches and app use, and individual apps can still read your location if you gave them permission. For real protection you need three things: Location History off, per-app location permissions set to only while in use or denied, and approximate location instead of precise where the app allows it.

Can apps still track me if I never gave them permissions?

Mostly no, but a few side channels remain: your advertising ID (delete it as described in this guide), fingerprinting through your device model and installed fonts, and trackers embedded in websites you visit. A private browser, deleting the advertising ID, and using private DNS or a trustworthy VPN close most of these gaps. No single setting makes you untraceable, but the steps in this guide remove the easy, high-volume tracking that affects almost everyone.

Auraz Tech Editorial Team — we test every guide on real devices and keep our tutorials updated.