Why Mobile App Users Are Becoming More Selective About Permissions

Data protection is hardly a niche topic.  Ninety-five percent (95%) of smartphone users are concerned about their data privacy, with 51% actively attempting to limit what they share. And since apps are the primary way we connect to the internet, especially on our phones, it makes sense that users are reevaluating the data they're willing to share.

Only 12% of users blindly accept app permissions, half of the 24% who read and decide on each permission individually. But while consumers are increasingly anxious about their data security, app developers aren't responding. 65% of users say they had to grant permissions they weren't comfortable with to use an app they wanted.

These users may grudgingly download a desired app, but their bad feelings about it will linger. They may delete the app quickly after they've gotten what they need, or share their privacy concerns with friends and family. Companies and developers need to address legitimate worries people have about their data if they expect to succeed.

Users are increasingly aware of the risks of granting apps too many permissions, especially when it comes to location data. In 2025, a hacker accessed data from Gravy Analytics, a major broker who had purchased information from popular apps like Tinder and MyFitnessPal. 30 million location records were posted on a cybercrime site, allowing those with criminal intent to track users' movements in detail.

Another source of user frustration is when their data is shared with third parties without notification. A 2025 lawsuit alleges that Allstate Insurance Company paid developers to embed tracking software in popular driving-related apps such as Life360 and GasBuddy. Information, including location and accelerometer readings, was then allegedly used to help Allstate determine car insurance rates.

With threats coming from multiple directions, it's no surprise that people are concerned. 56% of users believe an app has accessed their microphone or camera without their knowledge, while 28% have heard of it happening to someone else. Whether it's true in a particular situation is beside the point. Feeling like your phone is spying on you is an understandable response to poor data handling from companies and app developers.

Powerful AI tools make data collection both more urgent and more lucrative. Models need massive amounts of data to function well, but the insights produced are more valuable and predictive than ever before. Users understand the potential AI has, though, and they're adjusting their behavior accordingly.

The average consumer sees dozens of targeted ads a day, and each one is a reminder of how much of their personal information flows through the data economy. An idle internet search for a dream vacation spawns commercials for luxury resorts on a streaming service. Engaging with a skincare brand on social media means more ads about lotion in your feed. Helpful, sure, but this kind of advertising also reminds users of how little control they have over how and to whom their data is sold.

Though they may not have a say in what happens to their data, app users know they can control how much gets out in the first place. 70% cite data privacy as their top concern when downloading a new app, and these people are more likely to ask why a permission is needed or deny it altogether.

Users still like apps, though, even when they have misgivings. 39% say they accept the potential use of their data for purposes beyond the stated reasons, such as the cost of downloading an app. Are grudging users with privacy concerns the ones developers want, though? App fatigue is real. These users may fail to take full advantage of such an app and delete it as soon as they're able.

When asked which app permission they were most reluctant to give, 31% of users said payment methods, 23% said location, and 19% said contacts. Along with calendar access, these permissions offer up plenty of valuable data, and when combined, they can provide advertisers with a surprisingly complete profile of a user's movements, lifestyle, finances, and social connections.

Location is a particular source of user unease. When downloading a new app, a whopping 75% are concerned about the app tracking their movements when they’re not using it. No wonder 50% of users are uncomfortable granting location access to an app without a clear reason, and 60% only allow location access while actively using an app. Background location access can reveal extremely personal information about a user’s family life, where they worship, and where they seek medical treatment. It’s a vast amount of data, more than developers may realize.

Over the years, app developers have become comfortable asking users for broad permissions up front. Sometimes, those permissions are necessary for improved app functionality, but even then, developers may not realize just how much information they're collecting.

Developers are also doing a poor job of explaining to users why an app needs a particular permission, with 54% only sometimes or rarely understanding why an app requests it. And increasingly, when presented with a permission request they don't understand, people decline to accept it.

Providing clear explanations for necessary permissions builds trust, while asking for broad access that can be misused destroys it. Users know that a flashlight app doesn't need their location, and that a social app functions fine with access to contacts. If they have similar, more privacy-friendly apps to download, they'll choose those.

More selective user behavior means developers face two challenges: convincing users that app permissions are necessary, and reducing the number of permissions an app needs to run effectively.

Businesses can meet the first challenge by making an app’s permission requests contextual. Don't make requests based on planned future functionality, or before a customer has activated a feature that requires extra access. If the user sees the need for a permission, they're more likely to accept.

Clear explanations aren't enough, though. With 31% of users denying all app permissions by default, developers need to build an app that functions well, even without any access. Think of it as graceful degradation for the here and now: an app that provides reliable, if limited, functionality even with all permissions denied.

User fears about data protection aren't a theoretical problem for businesses. Once customers lose trust in an app, many of them are gone for good. 74% of app users have revoked permissions they believed were being misused, and 71% have deleted an app altogether out of privacy concerns. For businesses, that means a loss of data and customer contact, which could lead to a drop in revenue.

Worried customers tend to spread their fears to friends and family, causing long-term damage. Once a developer or a business has a reputation for being cavalier with user data, that perception may take considerable effort and resources to correct.

So, with users increasingly concerned about privacy and aware of the risks posed by app permissions, what can developers do to adapt?

First, be thoughtful about the permissions an app needs to perform its core functions. A scheduling app likely needs calendar access, but a social app probably doesn't. If you can't clearly and succinctly explain to a potential user why an app needs a particular permission, maybe you don't really need that access. This is especially true for location. Unless your app really needs background location access, shift from an "always" to a "while using" permission.

In the long term, though, companies need to reorient their marketing strategies away from user information that depends on app permissions. Customer-provided data is often more valuable, and a first-party data strategy offers businesses an opportunity to differentiate themselves. Users feel like most apps don’t respect their privacy, so the ones that do stand out.

Users' suspicions about how apps use their data are, unfortunately, often well-founded. However, there are effective strategies to defend against app overreach.

• Revoke requests you aren't comfortable with: If you can't understand why an app needs a permission or think it's too much, revoke it.
• Be careful about your location: If an app doesn't need background location information, switch the permission from "always" to "while using."
• Be cautious of apps that ask for a lot of permissions: It could be a sign that the app is using your data in ways you don't want.

Expert Insights

If there's one key piece of advice to keep in mind, it's this: regularly audit your app permissions. Yogendra Gupta, Project Leader / Tech Lead Mobile/Cloud at Konstant Infosolutions, says, "One of the most meaningful steps an average user can take to reduce data exposure is to regularly review app permissions and remove access that is not truly necessary. Many people grant permissions quickly while installing an app and rarely check them again afterward." Make time to scroll through your list of apps and permissions at least once every few months.

Few of us want to give up the convenience apps offer, and most of us understand that providing some of our data can lead to a better experience. However, users need to be careful not to give away more than they want to.

Privacy concerns about apps aren't merely the result of a few paranoid users or of people reading too much into isolated news stories. These worries are rational responses to well-documented data breaches and over-permissioning from developers.

The permission dialog is more than a formality now. It's a trust signal and the start of a relationship with a user. Developers who respect that relationship and don't treat it as a data grab will win in the long term.