The basic rule: ask when the feature is used
A well-designed app asks for a permission at the moment you use the feature that needs it. The camera permission appears when you tap to take a photo, location when you open the map. If an app asks for everything on its first screen, that’s a good reason to ask “why?”
Permissions one by one
| Permission | Gives access to | Keep in mind |
|---|---|---|
| Location | Where you are | “While using the app” and “approximate location” are enough for most apps. |
| Photos | Images in your library | You can share only selected photos instead of the whole library. |
| Camera / Microphone | Live video and audio | An indicator appears at the top of the screen while in use. |
| Contacts | Everyone in your address book | You’re sharing other people’s details too. |
| Notifications | Sending you messages | A permission for your attention, not your data; easy to turn off later. |
| Tracking (iOS) | Cross-app tracking with the advertising ID | Declining doesn’t stop the app from working. |
Location: precise or approximate?
Since iOS 14 and Android 12 you can choose approximate location when granting access. For apps that need city-level information, such as weather or prayer times, approximate location is enough; features like turn-by-turn navigation need precise location. “Always” access should only go to apps that genuinely need to work in the background.
Photos: limited access
Both iOS and recent Android versions let you give an app only the photos you select instead of your whole library. You don’t need to open your entire archive to upload a profile picture.
How to review permissions
- iPhone: under Settings › Privacy & Security you can see which apps have access to each permission type. The “App Privacy Report” shows how often apps use them.
- Android: the Privacy dashboard under Settings › Security & privacy (the name varies by device) lists which apps used location, camera and microphone in the last 24 hours. Since Android 11, permissions for apps you haven’t opened in a long time can be reset automatically.
Our approach
In Cedi Studio apps we keep everything we can on the device and only ask for the permission a feature really needs, when it needs it. Each app’s privacy page explains clearly which data is used and why; you can find them all on our legal page.
