How to Review App Privacy Report on iPhone (2026)

To review the app privacy report on iPhone, open Settings, scroll to Privacy & Security, tap App Privacy Report near the bottom of the list, and flip the toggle on. Give it three to seven days of ordinary use, then come back and read the four sections: Data & Sensor Access, App Network Activity, Website Network Activity, and Most Contacted Domains. The whole check takes about two minutes once you know where to look, and nothing needs to be installed.

The feature arrived in iOS 15.2 and is built into every iPhone on a current iOS release. It is off until you switch it on, which is the single biggest reason people open it, see nothing, and assume the phone is clean.

What You Need

Three things, and only one of them is the iPhone itself.

• An iPhone on a supported version. If the App Privacy Report row is missing from Privacy & Security, the phone is on iOS 15.1 or earlier, and there is nothing to find. On iOS versions before 15 the menu was called Settings > Privacy rather than Privacy & Security, which is why older screenshots send people looking in the wrong place.
• The app you want to look at. You do not need to install it. If it is already on the phone, its report entry exists once data has accumulated.
• Several days of normal use. The report covers a rolling seven-day window and only collects from the moment you turn it on. An empty report on day one means nothing.

Handy but optional: the app’s privacy policy (Settings > Privacy & Security > Privacy Policy opens the App Store entry for the last app you installed), a pen for noting timestamps, and your Apple Account password in case you also run Safety Check.

Battery cost is negligible. Nobody credible has measured a meaningful drain from this setting, and most people leave it on permanently after the first scare.

Step-by-Step: Review an App’s Privacy Report on iPhone

The full route takes under a minute once you know it: Settings > Privacy & Security > App Privacy Report. Here is each part of that route in the order you will meet it.

Open the App Privacy Report

Open Settings, scroll down the main list until you reach Privacy & Security, then scroll again to the bottom of that screen. App Privacy Report sits in the lower block of rows, near Analytics & Improvements. Tap it and a single toggle appears at the top.

1. Turn App Privacy Report on. Collection starts immediately; there is no separate confirm step.
2. Wait at least a few days before drawing conclusions. The window holds seven days of activity and older entries drop off.
3. Return to the same screen to read. Tapping the app list takes you to the sensor section; the domain sections are one tap further in.

On iPad it works the same way under Settings > Privacy & Security > App Privacy Report, and it also exists on Apple Watch and Mac, though the iPhone list is the most detailed.

One behaviour catches everyone out: turning the toggle off deletes everything collected so far. There is no archive. If you want to keep a record, take screenshots before you switch it off.

Find the App You Want to Check

The report opens on an alphabetical list of every app with recorded activity, so you scroll rather than search. Some entries show nothing at all, which simply means the app has not touched a sensor or opened a connection since the report started collecting. Tap an app name to expand its Data & Sensor Access entries; tap again to collapse.

Scan the list once rather than jumping straight to one app. A nameless utility with a burst of microphone access at 2am looks very different once you see it in context, and that pattern is the whole point of the check.

Read the Data and Safety Details

Every expanded entry names the app, the type of data or sensor, and a time range. Here is what the rest of the report contains and how to read it.

Data & Sensor Access

This is the list you will care about most. Each row pairs a sensor with a timestamp, for example Camera, Microphone, Location, Contacts, Photos, Bluetooth, Speech Recognition, or Health. A row means the app requested access to that sensor at that moment, not that it recorded anything.

Get the time range right and the whole feature stops being frightening. A range like 11:11 to 12:44 is the duration of access, not a 93-minute recording. It tells you the app held the sensor or the data open for roughly that stretch, which is normal for a navigation app holding Location on a long drive and not normal for a torch app sitting on Camera for an hour and a half.

Shorter entries are usually a foreground request, the moment you tapped something. Long background ranges deserve attention, especially Microphone, Camera, or Location on an app you barely open.

App Network Activity

This section lists the domains each app contacted over the network, with timestamps and time spent. It is the fastest way to spot an app phoning a tracker or an ad network you never agreed to. A weather app talking to one forecast service is normal; the same app talking to a dozen ad domains is the pattern worth acting on.

Website Network Activity

Same format, different source: these are domains contacted by web pages opened inside apps, such as an article inside a news reader. Readers often expect this to include Safari, and it does not fully. Activity from private browsing sessions is left out, which surprises nearly everyone the first time they go looking for it.

Most Contacted Domains

This is a ranked list across everything, apps and in-app websites together. It is the quickest place to start because the names speak for themselves: a top of the list dominated by one advertising and one analytics domain tells you where your data is going without opening a single app.

Apple labels some domains with their owner, so a name that looks unfamiliar may be marked as belonging to Google or Meta. Look for the ownership line before you worry.

Compare the Report with App Permissions

You cannot change permissions from inside the report, which is the second thing that frustrates people. The permissions live one level up, still inside Privacy & Security, each under its own row.

• Camera, Microphone, Photos, Contacts, Calendar, Bluetooth each open a list of apps with a toggle per app.
• Location Services holds Location and the per-app location permissions, including Ask, While Using, and Always.
• Tracking controls Allow Apps to Request to Track, the App Tracking Transparency prompt.
• Analytics & Improvements is separate and unrelated to per-app permissions.

Now compare the two views. If the report shows Location access for an app on Tuesday and its permission says Never, something has changed since you set it. If Camera is set to While Using the App but the report shows a 20-minute range at 3am, the app was in the foreground longer than you thought.

This cross-check is where the report becomes evidence rather than trivia.

Review the App Privacy Report on iPhone After Using It

Return after a few days of ordinary use, ideally with a full week accumulated so the rolling window is meaningful. Open the app entry, read the sensor rows, then read the network sections for the same app.

Change one variable at a time. Revoke a permission, use the app normally the next day, and check whether the matching entry disappears or drops to a shorter range. That single test tells you whether an unusual entry came from the permission itself or from something else the app does.

A weekly glance is enough. More often than that and you will start reading normal behaviour as a problem.

Common Mistakes When Reviewing iPhone App Privacy

Most alarming reports come from one of these five misreadings.

Expecting history before you switched it on. The feature records from the moment you enable it. There is no back catalogue, so a first check that looks spotless tells you only that nothing happened during the twenty minutes since you turned it on.

Reading a time range as a recording. This is the big one, and it drives a lot of unnecessary anxiety. A camera entry running from 11:11 to 12:44 gets read as 93 minutes of continuous filming, when the real explanation is usually an app holding a sensor handle open. The orange and green indicator dots in Control Center are the tie-breaker: if no dot was showing, nothing was being captured.

Treating Apple’s own apps as findings. Contacts, Photos, and Safari appear in almost everyone’s report and for boring reasons: the Contacts app reads contact data constantly, Photos runs on-device analysis such as face recognition, and Safari touches the media library. Known behaviour, not surveillance.

Expecting to fix permissions inside the report. The report is a read-only log. Revoking happens in Settings > Privacy & Security > Camera, Microphone, Location Services, or the relevant category, one app at a time.

Judging a domain by its name alone. Lists are flooded with familiar names from large ad and analytics platforms, which buries the one unfamiliar entry you are hunting for. Look at rank and ownership, and check whether the unfamiliar domain appears across several apps or only one.

Two more worth naming: confusing this report with the App Store privacy nutrition labels, which are a developer’s own declaration written once at submission time, and comparing against a report gathered on a different phone, which is meaningless because every install behaves differently.

What to Do If the App’s Privacy Report Looks Concerning

Some findings deserve a response. These are the ones worth acting on:

• Camera or Microphone access in long background ranges from an app with no obvious reason to use them.
• Location access when the app was closed, especially with an Always permission.
• The same unfamiliar domain appearing across several unrelated apps.
• An app you do not remember installing at all.
• Any entry that lines up exactly with an odd event, such as a fake virus warning page that appeared on its own.
• Network activity to a domain whose owner is unknown and whose name mimics a legitimate service.

Then work through this in order.

1. Read the app’s privacy policy. In Settings > Privacy & Security > Privacy Policy, or on the App Store listing. If the disclosure matches what the report shows, you have a preference decision, not an incident.
2. Revoke the permission. Settings > Privacy & Security > Camera, then Microphone, Contacts, Photos, or Location Services. Set the app to Never, or to Ask, and move on. The app will usually keep working with reduced features.
3. Limit tracking. Settings > Privacy & Security > Tracking, and switch off Allow Apps to Request to Track. Expect some apps to nag you on next launch.
4. Wait a day, then re-check the report. If the entry is gone, you found the cause.
5. Contact the developer if the behaviour does not match the policy. Screenshot the entry; developers respond faster to a concrete timestamp than to a description.
6. Delete the app when the behaviour is unexplained and the app is optional. Your data goes with it.

For a phone that was physically accessible to someone else, widen the check. Run Safety Check at Settings > Privacy & Security > Safety Check to review sharing and emergency reset, and review the device list under Settings > [your name] > Devices. To clear everything and start over, use Settings > General > Transfer or Reset > Reset > Reset Location & Privacy, which clears location history and resets privacy permissions across apps so each one asks again. Note that reset also wipes your accumulated App Privacy Report data.

One thing the report does not cover: activity from before it was switched on, and anything inside a private browsing session. Those gaps are the reason to pair it with Safety Check rather than rely on it alone.

Frequently Asked Questions

Conclusion

Start with one thing: open Settings > Privacy & Security > App Privacy Report, turn it on, and leave it alone for a week while you use your phone normally. When you come back, read one app’s Data & Sensor Access entries as access durations rather than recordings, skim App Network Activity and Website Network Activity for a domain you cannot place, and compare what you see with the permissions in Settings > Privacy & Security. Revoke anything you did not expect and reset the App Privacy Report data by switching it off if you want a clean slate. The steps here are current as of 2026.