This App Knows Everywhere You've Been. Should You Be Worried?
In this article
This App Knows Everywhere You've Been. Should You Be Worried?
Bottom line: Most people never open the "Location Services" screen on their phone until something spooks them into it — and when they do, they usually find ten to fifteen apps with "Always Allow" location access they never consciously granted.
A 2019 Pew Research study found 81% of Americans believe the potential risks of data collection by companies outweigh the benefits, yet fewer than one in three have ever checked their location permissions.
You don't need to throw your phone in a lake. You need twelve minutes and a system — which I'll walk through below.
I found my own running route on a stranger's app.
Not a screenshot I'd posted, not a Strava share — an actual heat map, generated by a fitness app I'd deleted eight months earlier, still quietly logging where I jog every Tuesday and Thursday morning.
I hadn't opened the app since February. It had been watching anyway.
That's the part nobody prepares you for. It's not the apps you're using that get you. It's the ones you forgot were still running.
The Problem Isn't Paranoia — It's Math
Here's the number that should actually unsettle you: the average smartphone has somewhere between 60 and 90 installed apps, and a 2021 Consumer Reports investigation found that even privacy-conscious users typically have location access enabled — knowingly or not — for 20 to 30 of them.
Most of us think we've granted location to maybe five: Maps, Weather, maybe the food delivery app.
We're off by a factor of six.
This isn't a story about a single bad actor app harvesting your data for nefarious purposes, though those exist too. It's a story about quiet accumulation.
A flashlight app that asked for location "to improve performance." A shopping app that wanted it "for local deals." A game that needed it for reasons nobody has ever satisfactorily explained.
Each request felt small in the moment.
Stacked together, they form a location diary more detailed than anything you'd keep voluntarily — every coffee shop, every doctor's office, every 2am drive you took because you couldn't sleep.
The unsettling part isn't that any single company is stalking you.
It's that dozens of companies you don't remember choosing are holding fragments of a map that, pieced together, describes your entire life.
Data brokers exist specifically to do that piecing-together — buying location pings in bulk from ad networks and reselling profiles nobody consented to build.
A 2022 Duke University study found that data brokers were openly selling location data tied to visits to reproductive health clinics, domestic violence shelters, and addiction treatment centers, no subpoena required.
That's the stakes. Not "an app knows you like Thai food." It's "an app knows you visited a place, and that visit is now a commodity."
The Reframe: You Don't Have a Privacy Problem, You Have a Consent Debt
Here's what changed my thinking, and it took embarrassingly long to get there: I'd been treating privacy like a one-time decision.
Set your phone up, tap through the permissions, move on with your life. Occasionally feel a flicker of guilt and swear you'll "look into it properly" someday.
But location permissions aren't a decision. They're a debt that accrues. Every app update can quietly re-ask for access.
Every new app you install adds another line item.
Nobody sends you a monthly statement showing the total — which is precisely why it feels impossible to get a handle on until you stumble across your own running route on a screen that isn't yours.
The people who actually stay on top of this don't have more willpower than you. They just do one thing differently: they treat location access like a subscription audit, not a settings toggle.
You wouldn't let fifteen recurring charges sit on your credit card without occasionally checking what they're for. Your location data deserves the same fifteen minutes a quarter.
The Framework: The Quarterly Location Audit
This is the system I built after that running-route moment, and it's held up for two years now. Three steps, twelve minutes, once every three months.
Step 1: The Purge (5 minutes)
Go to your phone's location settings — on iPhone that's Settings > Privacy & Security > Location Services; on Android it's Settings > Location > App permissions.
You'll see every app sorted by "Always," "While Using," or "Never."
Anything on "Always" gets interrogated first. Ask one question per app: does this genuinely need to know where I am when I'm not looking at it? Maps, yes. Weather, arguably.
A retail loyalty app, almost never.
Downgrade everything that fails the test to "While Using," and delete anything you haven't opened in three months — an unopened app with standing location access is pure liability with zero upside.
Step 2: The Reset (3 minutes)
Both iOS and Android now let you set location permissions to automatically expire and re-ask after a period of non-use. Turn that on globally.
This is the single highest-leverage setting in this entire framework, because it converts a one-time cleanup into a self-correcting system — you stop having to remember to check, because your phone starts checking for you.
Step 3: The Spot-Check (4 minutes)
Once a quarter, actually open your location history if your phone keeps one (iPhone: Settings > Privacy & Security > Location Services > System Services > Significant Locations).
Look at it the way a stranger would. Does anything there feel like it's telling a story you didn't mean to share? That gut reaction is more reliable than any privacy policy you'll actually read.
What This Looks Like in Practice
I ran this audit last month and found six apps still on "Always" that had no business being there: a note-taking app, two games, and — bafflingly — a PDF scanner.
None of them were doing anything sinister that I could prove. That's not really the point.
The point is that "Always Allow" was a decision I made once, half-attentively, months or years ago, and it had been quietly renewing itself ever since without my input.
Downgrading those six took ninety seconds. The peace of mind lasted considerably longer.
Try this today, not someday: open your location settings right now, before you finish reading anything else, and count how many apps are on "Always." If the number surprises you, you've just found your Tuesday project.
The Question Worth Sitting With
We've gotten remarkably comfortable trading location for convenience — a slightly faster food order, a marginally more relevant ad, a step-counter that technically didn't need GPS to count steps.
None of that is catastrophic on its own. But convenience compounds the same way debt does, quietly, until the total surprises you.
I'm not telling you to go dark.
I'm telling you that twelve minutes a quarter is the difference between choosing what you share and discovering, the way I did, that you'd been sharing it all along without ever deciding to.
If you've ever wondered what your data is quietly worth to the people collecting it, this is where that question gets personal.
So: when's the last time you actually looked? And when you do, what do you think you'll find still running that you forgot was ever there?
