Get a Pentest and security assessment of your IT network.

Cyber Security

App Location Access: Does Off Mean Off?

TL;DR

Turning off location services in your phone’s settings doesn’t always stop apps from knowing where you are. Some apps can use Wi-Fi, mobile networks, and Bluetooth to estimate your location even with GPS disabled. Check app permissions individually, and be aware of background activity.

Understanding How Location Works

Location isn’t just about GPS. Here’s a breakdown:

  • GPS: The most accurate method, using satellites.
  • Wi-Fi Positioning: Apps can see nearby Wi-Fi networks and use databases to estimate your location. This works indoors where GPS is weak.
  • Mobile Network Positioning: Similar to Wi-Fi, but uses cell tower data. Less accurate than GPS or Wi-Fi.
  • Bluetooth Beacons: Apps can detect Bluetooth signals from nearby devices.

Steps to Control App Location Access

  1. Check Your Phone’s Main Location Setting: This is the first step, but not enough on its own.
    • Android: Go to Settings > Location. You can usually toggle location ‘On’ or ‘Off’.
    • iOS (iPhone/iPad): Go to Settings > Privacy & Security > Location Services.
  2. Review App Permissions: This is the most important step.
    • Android: In Settings > Apps, select an app and then ‘Permissions’. Look for ‘Location’ access. You’ll see options like:
      • Allow only while using the app: The safest option – location is only used when the app is actively open.
      • Allow all the time: Avoid this unless you specifically need background location tracking (e.g., navigation).
      • Deny: Prevents the app from accessing your location.
    • iOS: In Settings > Privacy & Security > Location Services, select an app. You’ll see options like:
      • Never: Completely blocks location access.
      • Ask Next Time or When I Share: Prompts you each time the app wants your location.
      • While Using the App: Location is only used when the app is open and visible.
      • Always: Avoid unless necessary.
  3. Disable Background App Refresh (Optional): Some apps can use location in the background even with limited permissions.
    • Android: Settings > Apps > [App Name] > Battery > Restrict background activity.
    • iOS: Settings > General > Background App Refresh. You can disable it for all apps or individually.
  4. Check for ‘Approximate Location’ (Android 13+): Android 13 introduced a feature to share only approximate location data.
    • In Settings > Location > App location permissions, you may see an option to allow apps to request your precise or approximate location.
  5. Be Aware of System Services: Some system services (like emergency location) might still access location even with everything else turned off.

Technical Considerations

Apps can sometimes use techniques to infer your location without direct GPS access. This is harder to prevent, but being mindful of permissions and background activity helps.

Troubleshooting

  • Restart Your Phone: Sometimes a simple restart can resolve unexpected behavior.
  • Update Apps: App developers often improve location handling in newer versions.
  • Review App Privacy Policies: Understand how the app uses your data, including location information.
Related posts
Cyber Security

Zip Codes & PII: Are They Personal Data?

Cyber Security

Zero-Day Vulnerabilities: User Defence Guide

Cyber Security

Zero Knowledge Voting with Trusted Server

Cyber Security

ZeroNet: 51% Attack Risks & Mitigation