Permissions granted and access actually used
Reviewing the permission list tells you what an app is allowed to do. The Privacy dashboard tells you what it has recently done, which is frequently more informative.
Review the access histories your device offers, but do not assume the Privacy Dashboard is a complete log of photo-file reads. Use Permission manager to check which apps have granted photo and video access.
Granular media access changed the calculus
Recent Android versions distinguish between access to selected media and access to the whole library, and separate photos and videos from other files.
Use the smallest permission sufficient for the task. Apps that need only selected items should receive selected access where the platform and app support it, rather than access to the full library.
Revocation is forward-looking only
Removing an app's access stops future reads. It does nothing about copies already uploaded to that app's servers, shared with other users, or cached on the device.
The audit reduces ongoing exposure. Cleaning up what already left is a separate exercise.
Working through it
- Open Security & privacy and find the Privacy dashboard.
- Review recent access, not just the granted-permission list.
- Check Photos and videos, Camera, Microphone, and Files separately.
- Set unused apps to denied, or the narrowest option available.
- Open essential apps afterwards to confirm their workflow still functions.
Commonly skipped
- Reviewing permission labels without checking recent access.
- Assuming revocation deletes copies already uploaded.
- Ignoring preinstalled gallery, cloud, and manufacturer apps.
A fictional example
Jonas starts with a non-sensitive test: “Open Android's Security & privacy area and find Privacy dashboard.” Next, Jonas follows the second check: “Review Photos and videos, Camera, Microphone, and Files access.” This fictional scenario demonstrates the decision process; it is not a report of product testing.
Common mistakes
- Reviewing permission labels but not recent access
- Assuming revocation deletes uploaded copies
- Ignoring preinstalled gallery and cloud apps
What this workflow does not change
- Reviewing permission labels but not recent access
- Assuming revocation deletes uploaded copies
- Ignoring preinstalled gallery and cloud apps
Questions people ask
Will an app break if I remove photo access?
Some import or editing functions may stop until access is granted again. Test the exact task you need.
Does on-device processing mean no data collection?
Not automatically. Permission access and a developer's collection practices are related but different questions.