App Permissions and Tracking: How Android and iOS Privacy Controls Actually Differ
Both major mobile operating systems now advertise privacy as a headline feature, but the actual mechanics behind that promise are built very differently, and the gap between them shapes how much of your data actually leaves your phone. Apple's approach centers on a hard permission prompt that apps have to clear before tracking you across other apps and websites. Google's approach, still mid-transition, has historically defaulted to opt-out tracking with a slower move toward privacy-preserving alternatives. Neither system is a complete solution, but understanding how each actually works makes it much easier to configure your phone properly rather than just trusting the marketing.
How Apple's System Works
App Tracking Transparency, or ATT, requires any app that wants to track you across other companies' apps and websites — for targeted advertising, for instance — to show an explicit system-level prompt asking permission before it can access your device's advertising identifier. Declining doesn't necessarily stop an app from functioning, but it does block that specific cross-app tracking capability. In practice, opt-in rates have consistently landed in the 15–30% range, meaning the large majority of iPhone users who see the prompt choose to deny tracking when given a clear, unavoidable choice — a strong signal about what people actually want once the decision is made explicit rather than buried in a settings menu nobody visits.
That effectiveness has drawn regulatory scrutiny of its own, somewhat counterintuitively. German antitrust regulators concluded that Apple's implementation of ATT gave Apple's own advertising products an unfair advantage over competitors, since Apple's first-party apps aren't subject to the same prompt, and fined the company roughly €150 million as a result. iOS updates through 2026 have also added additional fingerprinting protections, closing off some of the workarounds ad networks had developed to identify users indirectly even after they declined the ATT prompt.
How Android's System Works
Android has historically taken a different approach, built around the Google Advertising ID, or GAID — a resettable identifier that, unlike Apple's system, has traditionally been opt-out rather than opt-in, meaning tracking happens by default unless a user actively finds and disables it in settings. That's a meaningfully different default than Apple's explicit prompt, and it's the core reason the two platforms diverge so much on actual tracking rates, since most users never change a setting they don't know exists.
Google's Privacy Sandbox initiative represents an attempt to move away from that model without blocking advertising entirely, using technologies like the Topics API and Protected Audience API to enable interest-based advertising through on-device, aggregated processing rather than sharing a raw identifier that follows a user across every app they install. It's a genuinely different philosophy from Apple's approach — rather than asking permission for tracking, it tries to make granular cross-app tracking technically unnecessary for advertisers by handling ad targeting locally on the device. Rollout has been gradual and, as of 2026, still incomplete across the full Android ecosystem, with adoption varying significantly by device manufacturer and region.
What This Means for Everyday Settings
On an iPhone, the highest-impact single setting is confirming Tracking is disabled globally under Settings > Privacy & Security, which prevents the ATT prompt from being useful workaround bait and blocks tracking access by default rather than case by case. It's also worth periodically reviewing App Privacy Report, built into iOS, which shows exactly which apps have accessed sensors, contacts, and network domains over the past week — a surprisingly effective way to spot an app quietly phoning home more than its function would suggest.
On Android, the equivalent high-impact step is resetting or deleting the advertising ID entirely under Settings > Privacy > Ads, which is available on most modern Android versions including the current rollout covered in our Android 16 rollout guide. It's also worth reviewing app permissions individually rather than relying on install-time prompts alone — Android's permission manager lets you audit every app with access to location, microphone, or camera in one place, and revoke access for anything that doesn't have an obvious reason to need it.
On-Device AI Adds a New Wrinkle
The rise of on-device AI features across both platforms — covered in detail in our comparison of Apple Intelligence, Gemini Nano, and Galaxy AI — has actually improved the privacy picture in one specific way: processing that used to require sending data to a cloud server, like transcribing voice notes or summarizing messages, increasingly happens locally on the phone's own chip instead. That's a genuine improvement, but it's not automatic across every feature on every phone, and it's worth checking whether a specific AI feature you use processes on-device or in the cloud, since that distinction still varies feature by feature even within a single manufacturer's lineup.
Neither System Is a Complete Answer
It's worth being honest about the limits here. ATT blocks cross-app tracking via Apple's specific identifier system, but apps can still build their own tracking through other technical means, including account-based tracking when you're logged into the same service across multiple apps, or fingerprinting techniques that don't rely on any single identifier at all — which is part of why iOS 26's additional fingerprinting protections mattered as a follow-up measure rather than a one-time fix. Android's Privacy Sandbox similarly doesn't eliminate all forms of tracking, just the specific raw-identifier-sharing model it was designed to replace, and the pace of adoption means many apps and ad networks are still operating under older tracking assumptions in the meantime.
Software update policy plays into this too — a phone that stops receiving privacy and security patches is a phone whose protections quietly stop improving, which is a bigger long-term factor than most buyers weigh at purchase time. We cover how long that support actually lasts across brands in our breakdown of Android versus iPhone software support.
The Bottom Line
Apple's opt-in model produces meaningfully lower tracking rates in practice, largely because most people decline when actually asked, while Android's opt-out default combined with its in-progress Privacy Sandbox transition means the burden still falls more heavily on the user to find and change the relevant settings. Neither platform makes you untrackable, but a five-minute settings pass on either one — disabling the ad identifier, reviewing app permissions, and checking what's processed on-device versus in the cloud — closes most of the practical gap between them.