Mobile Devices: Settings

Please note that your threat model, life circumstances, and personal safety are top priority. These recommendedations are a general "one-size-fits-most" solution to mass data collection. Your situation may require enabling or disabling settings, features, and apps contrary to what we recommend to ensure your own safety or that of your loved ones. Always prioritize your safety and consider what your threat model requires. See my criteria for this page here. Any settings not explicitly mentioned are likely "personal preference" and present little risk to your privacy/security either way.

Android 16

NOTE: Due to the nature of Android devices, some devices may have additional options. These settings are based on the Google Pixel (via Android Studio) and assume that you have not signed into your Google account on the device (see the notes at the end of this section).

• Google > All services > Quick Share > Who can share with you: Off, Your devices, or Contacts

• Google services > All services > Ads > Delete advertising ID

• Google services > All services > Personalize using shared data: Disable all

• Google services > All services > Usage & diagonstics: Disabled

• Google > All services > Search, Assistant, & Voice > Privacy & Safety > Search customization: Disable

• Google > All services > Search, Assistant, & Voice > Privacy & Safety > Other settings > Discover: Disable

• Google services > All services > Advanced Protection: Enable this if 1) you are signed into your Google account on your phone, and 2) you don't plan to use app side-loading or third-party app stores like F-Droid or Aurora (see the note at the end of this section)

• Network & internet > Internet > Carrier settings > 2G network protection: Enabled

• Network & internet > Internet > Carrier settings > Allow only encrypted networks: Enabled

• Network & internet > Internet > Network preferences > Allow WEP networks: Disabled

• Network & internet > Internet > Saved Networks: Remove old networks you no longer use

• Network & internet > Private DNS > Private DNS provider hostname: Any provider from this list (You can ignore this if you plan to use a VPN on your device)

• Connected devices > Connection preferences > Bluetooth: Disabled when not in use

• Connected devices > Thread > Disabled if not in use

• Connected devices > Connection preferences > Printing > Default Print Service > Use Print Service: Disabled when not in use

• Connected devices > Connection preferences > Quick Share: Off when not in use

• Apps > All apps: Uninstall or disable any apps you don't use

• Apps > Default apps: See Securing Mobile: Replacement Apps

• Apps > Cloud media app > None (or see Securing Mobile: Replacement Apps)

• Notifications > App notifications > Disable entirely on any apps you don't need realtime notifications from (notifications can be used to invade your privacy)

• Notifications > Notification history: Disabled

• Notifications > Notifications on lock screen: "Don't show any notifications"

• Display & touch > Lock screen > Privacy: Don't show notifications at all

• Display & touch > Screen timeout: Shortest duration you are comfortable with

• Display & touch > Screen saver: No photos that reveal something about you (such as family photos)

• Wallpaper & style: Set your lock screen to something generic and non-personal (no family photos, etc)

• System > Live Translate: This is done on-device for Pixel devices only, and therefore should be disabled for all non-Pixel Androids

• Security & Privacy: > Device Unlock > Screen lock: Strong password preferred, followed by 6-digit PIN.

• Security & privacy > Auto-confirm unlock: Disabled

• Security & privacy > Device Unlock > Screen lock settings > Enhanced PIN privacy: Enabled

• Security & privacy > Device Unlock > Pixel Imprint: Finerprint acceptable if coupled with a strong password or PIN

• Security & privacy > Device unlock > Theft protection > Theft Detection Lock: Enabled

• Security & privacy > Device unlock > Theft protection > Offline Device Lock: Enabled

• Security & privacy > Privacy controls > Permission manager: Check each app for any unncessary permissions and revoke them.

• Security & privacy > Privacy controls > Data sharing updates for location: Review apps

• Security & privacy > Privacy controls > Location access: Review apps

• Security & privacy > Privacy controls > Activity controls: Review settings

• Security & privacy > Privacy controls > More security & privacy > Personalize using app data: Disabled

• Security & privacy > Privacy controls > More security & privacy > Android System Intelligence > Customize the experience using your Google Account data: Disabled

• Security & privacy > Privacy controls > More security & privacy > Android System Intelligence: Clear data > All time

• Security & privacy > Privacy controls > More security & privacy > SIM lock: Enable (contact your provider for the SIM PIN)

• Location: Disable if you don't use it, otherwise review apps and disable permissions accordingly

• Location > Location services: Disable all (emergency services will still be able to pull the information regardless if you call them)

• Passwords, passkeys, & accounts: Empty all saved passwords, use a password manager instead

• Accessibility > TalkBack > Settings > Text-to-speech settings > Preferred engine settings > Anonymous usage reports: Off

• Note: It is possible to use an Android device without ever signing into a Google account for added privacy. This must be done during device setup. You can use F-Droid (or another client such as F-Droid Basic) to procure many open source apps, and Aurora Store as a proxy for the Play Store for anything else you can't get on F-Droid. Note that with Aurora you will not be able to use Google to process app-related payments such as subscriptions or one-time payments to download the app.

• Note: Android in particular is capable of a number of powerful, privacy- and security-enhancing strategies that iOS is not, such as the aforementioned "no account required," alternative app stores, sideloading, user profiles, and much more. Some of these are advanced techniques, but not all, though many of them fall outside the scope of this site. For those using or considering an Android device, I strongly encourage you to check out Privacy Guide's Android page to get an idea of some of the things your phone is capable of.

iOS 27

Last updated: August 12, 2026

NOTE: Different iPhones may have additional or slightly different options, and iOS updates occasionally move settings around.

Apple Account

• Name and Photo Sharing: Disabled
• Sign-In & Security > Two-Factor Authentication > Security Keys: Set Up
• iCloud > Saved to iCloud: Disable all syncing (be sure to delete the data from iCloud first) (Note: if you are interested in using iCloud, see here)
• iCloud > iCloud Backup: Off (see backup recommendations here)
• iCloud > Advanced Data Protection: Enable (if using iCloud at all; see here)
• Find My > Find My iPhone: Enabled (required for Stolen Device Protection)
• Find My > Find My iPhone > Find My Network: Off
• Find My > Find My iPhone > Send Last Location: Off
• Contact Key Verification: Enabled
• Media & Purchases > View Account > Personalized Recommendations: Off

Wi-Fi

• Remove unused saved networks
• Private Wi-Fi Address: Rotating
• Limit IP Address Tracking: On
• Configure DNS: Use a privacy-focused provider from this list (skip if using a VPN or encrypted DNS)
• Turn off Wi-Fi when not connected
• Auto-Join Hotspot: Off
• Ask to Join Networks: Off
• Connectivity Assist: Off

Bluetooth

• Off unless actively needed

Cellular

• SIM PIN: Create a custom PIN
• Disable Cellular Data for apps that don't need 24/7 access
• Wi-Fi Calling: On or Off (if you can)
• Calls on Other Devices: Off
• Personal Hotspot: Off unless actively needed

General

• Software Update > Automatic Updates > Automatically Install: On
• AirDrop > Receiving: Off when not in use
• AirDrop > Bringing Devices Together: Off
• AirPlay & Continuity > Automatically AirPlay: Never
• Background App Refresh: Off for apps you don't need refreshing
• Autofill & Passwords: Use a password manager of choice
• Keyboards > Dictation: Off
• Keyboards > Stickers: Off
• Device Name: Something generic (eg, "Phone")

Display & Brightness

• Auto-Lock: 2 minutes

Search

• Show Related Content: Off
• Suggest Apps: Don't Suggest
• Suggest App Shortcuts: Off
• Show Recent Searches: Off
• Help Apple Improve Search: Off

Apple Intelligence & Siri

• Talk to Siri: Off
• Suggestions: Disable all
• Siri App Access: Disable all
• ChatGPT Integration: Off
• Excluded Apps: Add all apps to the list

Wallpaper

• Use a non-personal image for your lock screen (no family photos, etc)

Notifications

• Scheduled Summary: Off
• Show Previews: Never
• Screen Sharing Notifications: Off
• Announce Notifications: Off
• Prioritize Notifications: Off
• Summarize Notifications: Off
• Suggestion Notifications: Off
• Siri Suggestions > Allow Notifications: Off
• Disable notifications for sensitive apps
• Keep tracking notifications enabled
• Government alerts notifications: Disabled (if desired) (Beware: this silences emergency/public-safety alerts)

Focus

• Disable all Focus modes to reduce unwanted sharing of your status and activity

Touch/Face ID & Passcode

• Passcode: A strong alphanumeric password is preferred
• Face/Touch ID: Enabled, paired with a strong passcode
• Require Passcode: Immediately
• Allow Access When Locked: All disabled
• Erase Data: Enabled (Beware of this setting, make sure you understand it)
• Stolen Device Protection: Enabled

Privacy & Security

• Location Services: Disable for unnecessary apps; set others to "While Using"
• Location Services > System Services: Disable all (except Find My iPhone)
• Tracking > Allow Apps to Request to Track: Off
• Research Sensor & Usage Data: Disabled
• Review all app permissions and disable unnecessary ones
• Safety Check: Review and revoke unnecessary sharing/access
• Analytics & Improvements: Disable everything
• Apple Advertising > Personalized Ads: Off
• App Privacy Report: Enabled
• Wired Accessories: Ask for New Accessories
• Background Security Improvements > Auto Install: Enabled
• Stolen Device Protection: Enabled

Game Center

• Disable

Standby

• Off

Messages

• Share Name and Photo: Off
• Shared with You: Disabled
• Summarize Messages: Off
• Screen Unknown Senders: On
• Text Message Filter: On
• Filter Spam: On
• Keep Messages: 30 Days
• Send Read Receipts: Off
• Retry as Text Message: Off
• Messages for Business: Off
• RCS Messaging: On

Phone

• Silence Unknown Callers: Silence
• Default Calling App: FaceTime Audio
• SharePlay: Off
• Smart Voicemail Actions: Off
• Live Voicemail: Off
• Unknown Callers filtering: On
• Spam filtering: On

Maps

• Preferred app: CoMaps

Photos

• Show Recently Viewed & Shared: Off
• Enhanced Visual Search: Off
• Hidden Album: Off
• Show Feature Content: Off
• Suggestions in Voicemail: Off

Translate

• On-Device Translation: Always

Screen Time

• Apps & Websites: Block apps you don't need
• Apps & Websites > Restrictions > Game Center: Blocked
• Apps & Websites > Restrictions > App Clips: Blocked
• Communication Safety > Improve Communication Safety: Off
• Content & Privacy Restrictions: Enabled
• Content & Privacy Restrictions > Other Features: Disable ones you don't need
• Content & Privacy Restrictions > Allow Changes to Settings: Set all to "Don't Allow Changes"
• Content & Privacy Restrictions > Siri: All blocked

Additional Habits

• Avoid jailbreaking
• Do not install iOS betas
• Restart your phone at least weekly
• Lock sensitive apps with Require Face ID/Touch ID
• Lockdown Mode: On (this also helps protect users who rely on it from being easily identified)

The following items were adjusted from the original guide to match NSA recommendations:

Note: The original guide included additional privacy hardening that exceeds NSA baselines. Those items remain valid choices if you prioritize privacy over recoverability. The NSA recommendations focus on general users seeking a security balance. (See VPN recommendations for the "VPN on Public Networks" item.)

By adjusting these settings, you are significantly reducing the amount of tracking and data collection these devices perform, but keep in mind that you are not completely eliminating it.