An ACM Digital Library study on third-party user tracking in mobile apps found that tracking often continues despite modern privacy controls. Although apps are increasingly expected to base their tracking methods on user consent, more than half of the apps analyzed in the study continued communicating with third-party domains even after tracking permissions were explicitly revoked.
While some data collection and functional tracking are essential for an app's core functionality, other forms of tracking exist primarily to support advertising, analytics, and user profiling. Fortunately, by combining the right settings with a few privacy-conscious habits, you can limit app tracking and significantly reduce the overall surface area for tracking.
This guide explains how to turn off app tracking on Android by managing your device's privacy controls. It also explores how tracking is performed, the mechanisms that enable it, and the risks associated with online tracking.
How Apps Track Users on Android
While Android apps historically relied on the mobile advertising ID to associate user activity across apps and services, that pathway is now more restricted. The advertising ID still exists, but access to it is now controlled through user-facing privacy settings, allowing users to either reset or delete the identifier altogether.
Still, app developers have found ways to reduce reliance on the advertising ID. Tracking doesn’t rely exclusively on this identifier—other mechanisms can be used to gather information about users’ habits, common behaviors, and interests.
Allowing the app to access your location, microphone, or other sensitive permissions can often be enough to enable certain forms of tracking. In addition, many apps embed third-party software development kits (SDKs) as tracking codes, enabling the sharing of collected information with external services for advertising, analytics, and profiling.
For example, once an app receives permission to access certain information, an embedded SDK can collect those signals and send them to external servers operated by analytics or advertising providers. Depending on the SDK, it may capture both foreground and background signals and record sessions automatically, or developers can configure it to record specific events and actions.
While the data gathered through this mechanism doesn’t necessarily identify you by name, the system relies on different identifiers, including device characteristics, IP address, account information, and, where available, advertising ID, to build a user profile. This allows advertisers to recognize returning users, categorize them into different interest groups, and personalize ads.
Which Android Permissions Enable Tracking?
If enabled, certain Android permissions can allow apps to collect the information needed to track and profile you with great accuracy. The following table outlines some of the most important Android permissions that can contribute to app tracking and user profiling:
Android Permission | How It Can Be Used for Tracking |
Location | Precise location data accessed through Google Location Services can support location-based advertising, tailored recommendations, and movement analysis |
Microphone | Primarily used for voice features, microphone access can also reveal behavioral patterns, or in some cases, enable techniques such as audio watermarking that detect inaudible signals embedded in media to confirm user interactions |
Camera | Camera access is required for legitimate features such as QR scanning or video calls, but may also be used to access visual information and image metadata for profiling purposes |
Contacts | Access to contacts can contribute to social graphs, user categorization, and more detailed user profiles |
Photos and Files | Metadata embedded in photos and files, such as location and timesteps, largely contributes to detailed user profiles later used for analytics or ad personalization |
Notifications | Notification access can reveal how you communicate, which apps you use, and what habits you demonstrate, contributing to behavioral profiling |
Bluetooth | Nearby Bluetooth devices can help estimate the proximity of a location, contributing to geolocation-based tracking, especially when combined with other signals |
Why You Should Disable App Tracking on Android
Disabling app tracking can affect certain app features. For example, Google Maps cannot provide turn-by-turn navigation or route-planning features without access to your precise location.
Still, when apps that don’t require certain permissions to deliver their core functionality request access to sensitive data, it’s often a telltale sign that the information may also be used for analytics, advertising, or profiling.
The main reasons to consider disabling unnecessary app tracking on Android include:
- Overall privacy and security: App tracking can lead to extensive profiling, allowing advertisers and third parties to use sensitive data to create detailed records of your activities, interests, and habits. Not only can this be used to deliver personalized ads, but it can also pose a serious risk in the event of breaches, hacking incidents, or unauthorized access.
- Greater control over personal data: Reviewing and managing app permissions lets you control what information is accessed, collected, and shared.
- Reduced ad personalization: Limiting app tracking makes it more difficult for advertisers to deliver highly personalized ads based on tracked behavior.
- Improved device performance: Some apps continue collecting data in the background even after you’ve closed them. Reducing unnecessary tracking can lower background activity, helping improve battery life and overall device performance.
How To Stop Apps From Tracking You on Android
There is no single setting that completely disables app tracking. However, combining several privacy controls can significantly reduce the amount of data apps collect and limit the tracking mechanisms they rely on.
The following five steps are among the most effective ways to manage app tracking on Android:
- Delete or reset the advertising ID
- Disable ad personalization
- Review app permissions
- Disable location access
- Limit background activity
1. Delete or Reset Advertising ID
The advertising ID is a resettable device identifier that allows apps and advertising partners to recognize your device across different services. Think of it as your personal marker that leaves traces across the apps you use and the content you interact with, making it easier to associate cross-app activities with you.
Now that Google requires apps to request permission before accessing the advertising ID, you can choose to:
- Reset the ad ID, which replaces the old identifier with a new one, making it more difficult to associate your future activity with your previous ID
- Delete the ad ID altogether to prevent its use for advertising and tracking purposes
To reset the advertising ID, follow these steps:
- Open your device’s main Settings app
- Tap Privacy, then Ads
- Select Reset advertising ID
- Tap Confirm when the confirmation pop-up appears on the screen
On older Android versions, the pathway may differ slightly: Settings > Privacy > Advanced > Ads > Reset advertising ID > Confirm.
To delete your advertising ID, follow these steps:
- Open your device’s main Settings app
- Tap Privacy, then Ads
- Select Delete advertising ID
- Tap Confirm when the confirmation pop-up appears on the screen
On some older versions of Android, the equivalent option is Settings > Privacy > Advanced > Ads > Opt out of Ads Personalization.
2. Disable Ad Personalization
Once you’ve reset or deleted your advertising ID, you can also disable ad personalization to further limit personalized advertising based on your activity and interests.
To turn off ad personalization through your Google account:
- Go to My Ad Center
- Select Off next to Personalized ads
- Confirm your selection if prompted
You can also manage additional advertising controls through Android’s Ads privacy settings:
- Open Settings on your Android device
- Tap Google
- Select All Services
- Under Privacy & security, select Ads, then Ads privacy
- Review and disable individual features such as Ad measurement and App-suggested ads (settings may vary depending on Android version)
Note that disabling ad personalization doesn’t prevent apps from collecting all data but rather limits how Google and partner advertisers use that information for ad personalization.
3. Review App Permissions
If not absolutely essential, you should revoke apps’ access to sensitive controls like camera, microphone, contacts, and photos. App permissions can be managed individually on your Android device:
- Open Settings
- Select Apps
- If you can’t find the app whose permissions you want to adjust, select See all apps
- Tap the desired app, then Permissions
- Tap the permission setting you want to adjust, then select Don’t allow to revoke it
For camera and microphone permissions, the options are more granular: Allow only while using the app, Ask every time, and Don’t allow.
4. Disable Location Access
Location access is one of the most sensitive privacy controls because it can expose your daily routines, frequently visited places, home and work locations, and movement patterns. This is why it is vital to disable location access for all apps that don’t require it to provide their core functionality.
To revoke location permissions on Android:
- Open Settings
- Select Apps
- If you can’t find the app whose permissions you want to adjust, select See all apps
- Select the desired app, then tap Permissions
- Tap Location, then select Don’t allow to revoke access
Note that location permissions also include the Allow all the time option, which enables apps to access your location even when you’re not actively using them. Unless continuous location tracking is absolutely essential to the app’s functionality, avoid selecting this option to minimize background tracking.
5. Limit Background Activity
If allowed, some apps may continue collecting data even after you’ve closed them. In addition to raising privacy concerns, unnecessary background tracking can drain your battery and affect overall device performance.
Here’s how you can manage background activity for individual apps:
- Open Settings
- Select Apps
- Tap the app you want to adjust
- Select App battery usage, then turn off Allow background usage
You can also manage the app’s background data by opening Mobile data & Wi-Fi within the app settings and turning off Background data, where available.
Alternatively, you can go to Settings > Battery and enable Battery Saver to reduce background activity across your device. Keep in mind that this method may also affect unrelated functions, such as email synchronization and app notifications, so adjusting background activity for individual apps is generally the optimal approach.
Does All Tracking Stop Once You Disable App Tracking?
Restricting app permissions, deleting the advertising ID, and employing other controls can significantly weaken the mechanisms apps use to track you. These settings also give you greater control over what data is accessed, how it’s used, and whether it’s shared with external parties. Still, disabling app tracking doesn’t eliminate other tracking surfaces.
One of the biggest concerns when it comes to user privacy and data collection practices is mobile carriers. As network-level threats grow stronger and more sophisticated, the security mechanisms employed by big telcos don’t appear to keep pace. Quite the opposite—the inherent trust placed in carrier infrastructure and their extensive data collection practices become increasingly evident in the aftermath of major breaches.
Salt Typhoon, a China state-linked cyberattack, is a prime example. The campaign, which began in 2024 and continues through 2026, compromised sensitive data belonging to thousands of users across at least nine major U.S. mobile carriers. Even today, the full extent of its consequences remains unknown, while many experts continue to describe it as one of the biggest telecommunication hacks in U.S. history.
You can’t protect your data from harmful collection, retention, and sharing practices by managing app controls alone. You can, however, enhance your overall privacy strategy by choosing a mobile carrier that prioritizes user privacy, such as Cape.
Cape: The Carrier Built for Security and Privacy
Cape is a privacy-first mobile carrier designed to keep your communications safe from surveillance and misuse. Unlike traditional cell phone plan providers, our business model centers around providing you with premium and secure call, text, and data, rather than harvesting and selling your information.
Our service is built from the ground up with privacy and security at its core, offering unique features like:
Privacy & Security Feature | Description |
Cape doesn’t ask for your name, address, or Social Security number. We only collect the information necessary to provide service, and we retain that information for the minimum amount of time possible. | |
Traditional carriers rely on a fixed International Mobile Subscriber ID (IMSI) to connect your device to cellular networks. This is a vulnerability that lets carriers, advertisers, and bad actors identify and track your device. Cape lets subscribers automatically rotate their IMSI every 24 hours, making it infinitely more difficult to track you or your device. | |
Many services ask for your phone number, but sharing it exposes you to spam, scammers, data brokers, and a variety of other risks. VoIPs, on the other hand, don’t work with 2FA, cost extra, and aren’t encrypted. With Cape, you get two free additional SMS/MMS lines that are middle-to-end encrypted. | |
Most U.S. carriers store your call and text metadata for years, sometimes indefinitely. Cape is built to forget, so call data records (CDRs) are deleted after just 24 hours. | |
Cape nullifies the threat of SIM swapping by completely removing humans from the loop. During signup, you receive a 24-word phrase that generates a private key tied to your number. This effectively means that no one (but you) can move your number to a new carrier or device, not even Cape. | |
Legacy network protocols, like SS7, leave you vulnerable to hackers that can track your location, intercept your calls and texts, and steal sensitive information. Cape’s Network Lock relies on a proprietary signaling proxy to verify that your device’s physical location matches the network it’s trying to attach to. If we detect anything out of the ordinary, Cape automatically blocks the connection, nullifying the potential threat. | |
Traditional voicemail systems are outdated, unencrypted, and another security hole bad actors can exploit to gain access to your sensitive information. Cape encrypts all voicemails, ensuring only you can access them. | |
While roaming, your phone connects to local telecom providers to enable service. But, who knows who might be listening on the other end. Cape provides you with peace of mind by routing your traffic through our U.S.-based mobile core, ensuring your identity, data, and communications remain private and secure. |
Ditch Legacy Carriers: Get Cape Today
Cape is a “Heavy” Mobile Virtual Network Operator (MVNO), meaning we own our mobile core and provision our own SIMs. This gives us full control over how accounts are authenticated and what data is collected (and for how long), and is how we are able to provide privacy and security features no other carrier on the market can offer.
Get started with Cape today and enjoy the peace of mind, knowing you are fully protected against scammers, hackers, bad actors, and other mobile threats.
To help protect more than just your phone, we’ve partnered with Proton. As a new Cape subscriber, you can choose between Proton Unlimited and Proton VPN Plus for just $1 for six months.
Share it
