Here’s the thing nobody tells you when you download a new app: that wall of text you skip past is actually a legal contract. Once you tap ‘agree,’ you’ve given that app whatever permissions it asked for — and agreed to whatever they plan to do with your data. (Note: if you’re under 18, some of these agreements may not be fully enforceable against you, but that doesn’t stop the data collection from happening.) The U.S. government’s own cybersecurity agency, CISA, specifically calls out apps that request access to your contact list, camera, microphone, storage, and location as things to pay close attention to.
Some of that data ends up in places you’d never expect. The Electronic Frontier Foundation (EFF) has reported that companies like Babel Street and Anomaly 6 collect location data pulled from apps and sell it — including to government agencies like the Air National Guard, U.S. Special Forces Command, Customs and Border Protection, ICE, and the Secret Service. So that free app on your phone? Its location data could travel a lot further than you think.
The fix isn’t to delete every app you own. It’s to be picky about permissions. CISA recommends checking what each installed app can actually access and removing any permissions it doesn’t genuinely need to work. If a flashlight app wants access to your contacts, that’s a red flag. Go into your phone’s settings, find the app permissions section, and look through what each app can see and use. If an app has access it doesn’t need, you can usually turn that off without uninstalling the whole thing. CISA also suggests considering deleting apps that ask for way more than they need to function.
The single most important thing you can take away from this: don’t assume an app is trustworthy just because it’s popular or free. ‘Free’ often means you’re the product. Check your permissions today — it takes about five minutes and it’s one of the most direct ways to protect your own privacy.