← Back to all free security checks
PHONE HYGIENE — 5-MINUTE AUDIT

Your phone isn't hacked. It's just oversharing.

A viral post says "delete these apps tonight" — free VPNs with no website, flashlight apps holding your contacts, abandoned apps, sideloaded keyboards. The fear is overblown in places, but the underlying advice is sound: most phones leak through permissions you granted years ago and forgot. Five questions, five minutes, honest answers — including where the viral claims go too far.

Short answer: on modern phones, no app silently steals your address book — you handed over the permissions. The fix isn't panic-deleting; it's a permission audit: check what each app can access, delete what you don't use, and kill the free VPN from a developer with no website. Do the five below.

The 60-second Phone Permission Audit

Answer for the phone you carry.

Share your result:

The 5-minute audit — do it now

1. Review permissions (the highest-leverage 2 minutes)

Android: Settings → Privacy → Permission Manager — tap Contacts, Microphone, Location, Camera and revoke anything that doesn't need it. iPhone: Settings → Privacy & Security — same review. A flashlight with your contacts is a revoke, not a scandal.

2. Delete the free VPN with no website

A VPN sees all your traffic. Free VPNs from anonymous developers have been repeatedly caught logging and selling user data. Keep a reputable one or none.

3. Delete apps you haven't opened in 6+ months

Abandoned apps don't get security patches, and ownership can change hands — a new owner can push an update that adds data collection you never agreed to.

4. Kill the sideloaded keyboard

A keyboard sees every password you type. Anything installed from outside the Play Store / App Store skipped review entirely. Go back to the default.

5. Check the "free" utilities

QR scanners, cleaners, photo editors, song identifiers — if it's free, ask what it collects. Check its permissions; check whether the developer has a real website and privacy policy.

Where the viral post overreaches (honest corrections)

Note: the originating post also promoted the author's own "make money with AI" training — it's marketing content. The hygiene advice above is evaluated on its own merits.

FROM INGENIOUS AI
BreachHunter finds the exposures attackers see first — audit your phone, then audit everything else.
All 11 platforms: DisclosureGuard  ·  ModelMinder  ·  TermsWatch  ·  Vibe-Code Audit  ·  Rogue-Agent Defense  ·  BreachHunter  ·  ChatBreaker  ·  Agent Flight Recorder  ·  Agent Auth Gateway  ·  DomainGuard  ·  ContentCraft AI
Our platforms are being upgraded and return November 1 — get early access now:
Get early access on WhatsApp →

An independent security take, not an endorsement. Advice evaluated on its own merits; viral claims corrected where they overreach.
This page is general information, not legal advice.

Share this check: XLinkedInReddit

Frequently asked questions

What are app permissions?

The access rights you grant apps — contacts, location, microphone, files. On modern phones nothing is taken silently; you handed the permissions over.

Which app permissions are dangerous?

Broad ones held by apps that do not need them: a flashlight reading contacts, a free VPN from a developer with no website, keyboards logging keystrokes.

How do I audit my phone's app permissions?

Open settings, review what each app can access, delete apps you no longer use, and revoke anything excessive — the five questions above walk you through it.