How do I check which apps have location access on my phone?

On iPhone, go to Settings, then Privacy and Security, then Location Services to see every app that has requested location access and its current permission level. On Android, go to Settings, then Location, then App location permissions to review which apps can access your location and when.

What is the difference between precise and approximate location?

Precise location uses GPS to pinpoint your exact coordinates, accurate to within a few meters. Approximate location tells an app your general area (roughly 3 square kilometers on Android) without revealing your exact position. Weather and news apps work fine with approximate location, while navigation apps typically need precise location to give accurate directions.

Can photos reveal my location even after I send them?

Yes. If location services were enabled for your camera when you took a photo, the image file contains embedded GPS coordinates. Anyone who receives the original file can extract these coordinates and see exactly where the photo was taken. Most social platforms strip this data before displaying photos publicly, but photos shared via email or cloud storage often retain it.

Should businesses have a location policy for company phones?

Yes. The Canadian Centre for Cyber Security recommends reviewing app permissions at device setup, allowing location access only when it aligns with the app's purpose, and deactivating location tracking when not needed. A clear mobile location policy helps protect both employee privacy and sensitive business travel or client site information.

The Dangers of Keeping Location Settings On

How do you check which apps can see your location?

You can review and limit location access in your phone's settings in under a minute. Both iPhone and Android let you see exactly which apps have requested location permission and change those settings app by app. Checking these permissions regularly helps you spot apps that have access they no longer need.

On iPhone (iOS 15 and later)

Open Settings, then tap Privacy & Security, then tap Location Services.
You will see a list of every app that has requested location access. Tap any app to change its permission.
Choose Never, Ask Next Time Or When I Share, or While Using the App. Some apps also offer Always.
Below the permission options, toggle Precise Location off if the app does not need your exact coordinates.
To review system-level location use, scroll to the bottom of Location Services and tap System Services. From here you can turn off Significant Locations & Routes if you do not want your device to remember places you visit frequently.

Source: Apple Support: About privacy and Location Services in iOS, iPadOS, and watchOS

On Android (Android 11 and later)

Open Settings, then tap Location.
Tap App location permissions. Apps are grouped by permission level: Allowed all the time, Allowed only while in use, Ask every time, and Not allowed.
Tap any app to change its permission. Choose Allow only while using the app for apps that need location only when open, or Don't allow for apps that do not need it.
If an app has location access, you can also toggle Use precise location off to share only your approximate area.
To manage location history, go to Settings, then Location, then look for Location Services or Google Location History (the exact name varies by device). From here you can turn off Timeline to stop your device from saving a record of places you visit.

Source: Google Support: Manage location permissions for apps

Menu names may vary slightly depending on your OS version or device manufacturer. If you cannot find a setting, use your device's search function within Settings.

How do you turn off photo geotagging?

When location services are enabled for your camera, every photo you take embeds GPS coordinates in the image file. This metadata is called EXIF data. If you share the original photo via email or messaging apps that do not strip metadata, the recipient can see exactly where the photo was taken.

On iPhone, you can stop your camera from tagging photos with location by going to Settings, then Privacy & Security, then Location Services, then Camera, and selecting Never.

On Android, open your camera app and look for a location or geo-tag setting in the camera's own settings menu. The exact location varies by device and camera app, but it is typically under a "Location" or "Save location" toggle.

If a photo already has location data and you want to remove it before sharing, see our guide: What Does a Photo Reveal About You?

Why location settings matter

Some common apps that request location permissions are maps, Find My Friends, and tracking for lost devices. Another area that often requests your location is social media. Easy tagging of places you visit can be fun, but it could also be dangerous.

When your location settings are on for your camera app, each photo you take will have a tagged location attached to it. This can be a great way to remember exactly where and when you took that photo, but if these photos are sent out or stolen, the person on the other end can see where you have been and the exact times you were there.

Sometimes we send photos to people we do not know very well. For example, when selling things online, you might take photos of your items and share them with potential buyers. Sharing these photos may expose much more information than you realize.

So, although it is convenient to have location settings turned on for all apps, it is important to think about what information these apps and photos are collecting. If that information gets into the wrong hands, you could end up as a target for cybercrime.

For businesses: mobile location policy checklist

Location data risks extend beyond personal privacy. If your team uses mobile devices for work, whether company-issued or personal, location settings can expose business travel patterns, client site visits, and sensitive operational information. The Canadian Centre for Cyber Security recommends organizations review app permissions and limit unnecessary location access as part of mobile device security.

Review app permissions at device setup. Before issuing a phone or onboarding a personal device, audit which apps have location access and whether each app genuinely needs it.
Turn off precise location where not needed. Many business apps work fine with approximate location. Reserve precise location for navigation and emergency apps.
Use MDM to enforce location policies. Mobile Device Management tools can set and lock location permissions across company devices, preventing employees from granting access to unapproved apps.
No social check-ins at client sites. A single geotagged post can reveal where your team is working, which may compromise client confidentiality or physical security.

Source: Canadian Centre for Cyber Security: Security configurations and best practices to protect your mobile device (ITSM.80.002)

Should you keep location settings off entirely?

When you open an app for the first time and you are prompted for location permissions, you are sometimes given an option for sharing one time or indefinitely. We recommend only sharing your location temporarily or only while using the app. This will reduce the amount of data an app can collect on you and your location.

When you choose to share your location indefinitely, you typically will not be asked again and many people do not realize that old apps and sites are still gathering location data on an ongoing basis.

In many cases, this is not a severe issue. However, cybercriminals are constantly finding new ways to compromise your data. It is always better to be safe than sorry.

Know your risks and practice safe cyber hygiene so you can avoid potential cyber risks in the future.

For a deeper look at the privacy tradeoffs of leaving location services on versus off, see our related article: Should Location Services Be On or Off? Privacy Risks Explained.

Not sure how your organization handles mobile security or other risk areas? Our free cybersecurity assessment covers 22 critical security areas in under five minutes.

This article is intended for general informational purposes only and does not constitute professional security advice. Menu paths and feature names may change with operating system updates. Organizations should consult qualified cybersecurity professionals to assess their specific mobile security needs.