Your phone is the most personal object you own. It is also the one that exposes the most information about you — often without your knowing.
This is not about sophisticated hacking. It is about default settings, over-permissive apps, and digital habits that create a gradual, invisible exposure.
What apps actually collect
Every app installed on your phone asks for permissions. Most users grant them without reading, because the app won’t work otherwise.
What these permissions actually allow:
Access to contacts — The app can read your entire address book, including the names, numbers, email addresses and notes attached to each contact. This data often goes to third-party servers.
Access to location — Even in the background, some apps track your movements continuously. Over time, this data reveals your home, your workplace, your travel habits and the people you spend time with.
Access to the microphone and camera — Apps unrelated to communication regularly ask for these permissions. How that access is actually used is rarely transparent.
You aren’t just granting a permission to an app. You are granting access to a company, to its commercial partners, and to the third parties it resells its data to.
The metadata in your photos
Every photo taken with your phone contains metadata. This invisible information includes, depending on your device settings:
- The exact date and time the photo was taken
- The precise GPS coordinates of where it was taken
- Your phone model
- Sometimes, information about your network
When you share a photo without removing this metadata, you share that information too. A photo posted on social media, sent by email or shared in a document can reveal your precise location at the moment you took it.
Wi-Fi networks and what they reveal
Your phone remembers the Wi-Fi networks it has connected to. It regularly broadcasts the names of these networks in an attempt to reconnect automatically.
This list is a record of your movements: the hotels you have stayed in, the offices you have visited, the places you frequent. Simple techniques make it possible to read this information near your phone.
Automatic backups
Most phones automatically sync their contents to a cloud service. Photos, contacts, messages, documents, app history — all of it goes to remote servers whose security you don’t really control.
If your cloud account is compromised — through phishing, through password reuse, or through a flaw in the service — all of that data becomes accessible.
A few things to check right now
These checks don’t require technical skills. They take a few minutes.
Review each app’s permissions — On iOS: Settings → Privacy. On Android: Settings → Apps → Permissions. Revoke anything not needed for the app’s core function.
Turn off geolocation in photos — On iOS: Settings → Privacy → Location Services → Camera → Never. On Android: in the Camera app → Settings → turn off location.
Check what syncs to the cloud — Are you sure you want your messages, your work documents and your photos ending up on remote servers?
Use a password manager — Reusing the same password across services is one of the most common causes of account compromise.
To go further without waiting for an audit, our digital hygiene guide for decision-makers sets out these reflexes as twelve concrete steps, each doable in under thirty minutes.
What an audit can do
A digital hygiene audit assesses your real exposure — not in the abstract, but by looking concretely at what you share, with whom, and how to reduce that exposure without disrupting your day-to-day use.
The result is a simple, prioritised action plan you can apply immediately.
Would you like to assess your personal digital exposure or your organisation’s? Contact us for a confidential audit.