App Hygiene: Unused Apps, Their Accounts and Privacy Updates

Additional resource for the lesson “App Hygiene and Updates” — Online Privacy course

Good app hygiene is not only about tidying your home screen. Behind many apps there is an account, and data about you that stays with the company when the icon disappears. This resource helps you see what an app leaves behind, close what you no longer need, read a privacy label before installing, and treat updates as part of your privacy.

A. Why this matters

Phones fill up with apps that made sense once: a parking app for one trip, a shop’s loyalty app, a trial of a tool you never adopted. Removing them is a good habit. But many came with an account: an email address, a phone number, perhaps a card, a history of what you did there.

Privacy, in this course, means three questions: what is known about you, by whom, and what you choose to let them know. An app you no longer open still answers the first two: the company may still hold what you gave it. App hygiene brings those answers back in line with what you actually use.

Updates belong to the same habit. They are security, but they also close gaps that let apps reach data they should not.

What the sources say

The app stores themselves treat removing an app and removing an account as different things. Since 30 June 2022, Apple has required apps on the App Store that support account creation to “let users initiate deletion of their account within the app”. Apple adds that only offering to deactivate an account temporarily “is insufficient”. Google Play has a similar rule: apps that let you create an account must offer a way to delete it, both inside the app and through a web link, because, in Google’s words, “some users might have already uninstalled your app”.

In the UK, the Information Commissioner’s Office (ICO), the data protection authority, explains that you can ask an organisation to delete your data, a right “also known as the ‘right to erasure’”. One of the situations where it applies is when the organisation “no longer needs your data for the original reason” it collected it. The organisation has one calendar month to respond. The ICO notes that this guidance is under review after the Data (Use and Access) Act.

On updates, the UK’s National Cyber Security Centre (NCSC) says that updates “will often include improvements and new features” as well as protection. Apple’s published notes on the security content of iOS 27 show that some of that protection is about privacy: next to a number of the fixes, the stated impact is “An app may be able to access sensitive user data”.

B. Key concepts

Six ideas that turn “tidy your phone” into decisions about your data.

The account behind the app

Many apps are only the front door of a service. The account, and the data linked to it, lives on the company’s systems, not on your phone.

Why it matters to you: Removing the icon removes the door, not the room behind it. If you no longer want the service to hold your details, close the account.

Uninstalling is not deleting your account

Uninstalling removes the app from your device. Deleting your account is a request to the company. Apple’s guidance to developers describes account deletion as removing the account from the developer’s records, “along with any data associated with the account that the developer isn’t legally required to maintain”.

Why it matters to you: Some records may be kept for legal reasons, such as invoices. Deleting the account still removes what the company has no reason to keep.

Subscriptions run separately

A paid subscription is a separate agreement. Apple tells developers to warn users who delete an account with an auto-renewing subscription that “their billing will continue through Apple”.

Why it matters to you: Removing the app or closing the account may not stop a payment. Check your App Store or Google Play subscriptions list first.

Pausing unused apps

Android can optimise apps you have not used for a long time: Google lists revoking their permissions, stopping them running in the background and stopping their notifications. In an app’s info, the switch “Pause app activity if unused” controls this.

Why it matters to you: It limits what a forgotten app can reach on your phone, but your account and data stay with the company. It does not answer the question “do I still want them to have my details?”

Privacy labels and the Data safety section

Before you install an app, its store page summarises what it says it collects. On the App Store, Apple’s privacy labels group data into “Data Used to Track You”, “Data Linked to You” and “Data Not Linked to You”. On Google Play, the “Data safety” section describes data collected, data shared with third parties, security practices and, in a data deletion section, how you can remove your data.

Why it matters to you: Labels are a one-minute check before installing, but they are written by the developer. Apple says the information “is self-reported by the developer”, and Google notes that an independent security review “does not verify the accuracy and completeness” of the disclosure. Read them as the app’s own statement, not as a guarantee.

Updates as privacy fixes

An update replaces part of an app or system with a corrected version. Some corrections stop apps reaching data they were never meant to reach, and new features can include new privacy settings.

Why it matters to you: A permission you refused is only as reliable as the software that enforces it. Updating protects the choices you have already made.

C. A practical example: Gianni’s forgotten apps

Gianni is 50 and runs a small business. One Sunday, looking for space for some photos, he scrolls through his phone and finds:

• a parking app from a trip to another city, with his card and number plate saved inside;
• the loyalty app of a shop that changed hands, linked to his email and birthday;
• a trial of an invoicing tool he decided against, with a few client names still in it;
• a photo editor with a monthly subscription he thought he had stopped;
• a torch app he does not remember installing.

His first instinct is to delete the lot. Then he pauses: removing the icons would free space, but the accounts, and what he had put into them, would stay where they are.

What changed when Gianni looked behind the icons

Gianni did the exercise below over a coffee. Nothing he found was a problem, only out of date.

• In the parking app he removed his card, used “Delete account” in the settings, and only then uninstalled the app.
• The invoicing tool had no deletion button, but the data safety section on its Google Play page linked to a deletion request page. He sent the request and noted the date.
• His subscriptions list showed the photo editor still active. He cancelled it there, then removed the app.
• He kept the loyalty account, by choice, but removed the app.
• The torch app went straight away: he could not say where it came from.

Finally, he installed the updates that had been waiting for weeks and spent two minutes in the privacy settings to see what was new. What changed was not the number of apps on his phone: every account he still had was now one he had chosen to keep.

D. Try it yourself: an app hygiene check (20 minutes)

Five short steps. One account properly closed is already a good result.

Step 1 — List the apps you have stopped using (3 minutes)

• Open the full list of apps in your phone’s settings.
• Note the apps you have not opened for months, those for services you no longer use, and any you do not recognise.

Step 2 — Ask what is behind each one (5 minutes)

For each app, ask:

• Is there an account? (Did you sign up with email, phone or a social account?)
• What did you put into it? (Card, address, photos, documents.)
• Is there a subscription? (Check your App Store or Google Play subscriptions list.)

Mark each app: “no account”, “account to close” or “account to keep”.

Step 3 — Close one account properly (6 minutes)

• Choose one “account to close”. Open the app and look for “Delete account”, usually in the account or privacy settings.
• If there is none, look at its store page: on Google Play, the data safety section may link to a deletion page. Otherwise, the privacy notice should say how to ask.
• Remove saved cards and cancel any subscription first. Delete the account. Only then uninstall the app.

Step 4 — Read one label (3 minutes)

• For an app you are keeping, open the privacy label on its App Store page or the “Data safety” section on Google Play.
• Notice one thing you did not expect, and decide whether it changes how you use the app.

Step 5 — Update, then look (3 minutes)

• Install any pending system and app updates, or set a time today.
• After a large system update, look through your privacy settings for anything new.

Repeat steps 1 to 3 once or twice a year. Step 4 is worth a minute before every new install.

Already covered in the Online Security course

Review Installed Apps: The Twenty-Minute Clear-Out
It guides a clear-out of your apps and their permissions; this resource looks at what stays with the company: accounts, data, subscriptions.

System Updates: The Security Measure That Looks Like Maintenance
It explains why delaying updates leaves known flaws open; this resource adds the privacy side.

E. Videos, articles and further resources

Institutional sources first, then the app stores’ own pages and phone documentation. All in English.

Institutional sources

Information Commissioner’s Office (UK) — Your right to get your data deleted
When you can ask an organisation to delete your data, and how.
https://ico.org.uk/for-the-public/your-right-to-get-your-data-deleted/

NCSC (UK) — Install the latest software and app updates
Why updates matter and why to turn on automatic updates.
https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/install-the-latest-software-and-app-updates

Privacy labels in the app stores

Apple Support — About privacy information on the App Store and the choices you have to control your data
What App Store privacy labels mean, and who writes them.
https://support.apple.com/en-gb/102399

Google Play Help — Understand app privacy & security practices with Google Play’s Data safety section
What the Data safety section shows, and what it does not verify.
https://support.google.com/googleplay/answer/11416267?hl=en-GB

App stores’ rules on deleting accounts

Apple Developer — Offering account deletion in your app
Why apps with accounts must let you delete them from inside the app.
https://developer.apple.com/support/offering-account-deletion-in-your-app/

Play Console Help — Understanding Google Play’s app-account deletion requirements
Deletion inside the app and through a web link.
https://support.google.com/googleplay/android-developer/answer/13327111?hl=en-GB

Your phone and its updates

Google Play Help — Manage unused apps on your Android device
How Android limits apps you have not used for a long time.
https://support.google.com/googleplay/answer/13627979?hl=en-GB

Apple Support — About the security content of iOS 27 and iPadOS 27
A real list of fixes, a number of them about apps accessing sensitive user data.
https://support.apple.com/en-gb/149034

Links checked in October 2026. If an address changes, searching for the title on the organisation’s site usually finds it.

F. The Cyber Welfare Framework: Skills, Awareness, Secure Behaviour

This resource sits on the Secure Behaviour pillar at level FL2 – Beginner, where knowing what an app leaves behind becomes a habit.

Skills

• Finding the “Delete account” option in an app, or the deletion route on its store page.
• Reading an App Store privacy label or a Google Play Data safety section.
• Telling uninstalling, pausing an app and deleting an account apart.

Awareness

• Understanding that the data behind an app lives with the company.
• Knowing that privacy labels are the developer’s own statement.
• Recognising that updates can fix ways apps could reach your data.

Secure Behaviour

• Closing the account before removing the app, when you no longer want the service.
• Reading the label before installing, not after.
• Installing updates promptly and checking privacy settings after a large one.

G. Questions to sit with

• Which app on your phone holds the most about you, and would you choose that company again today?
• If you uninstalled an app tomorrow, what would you want the company to keep, and what would you want it to forget?
• What would a privacy label have to say for you to decide not to install an app?

H. What to do now

The recommendations (R) and security measures (MS) from the Cyber Welfare database that apply most directly here.

1. Apps you no longer use

• R22 — Remove the apps you no longer use; where there is an account you no longer want, close it first.
• R30 — Remove apps you do not recognise: if you cannot say where an app came from or what it is for, removing it is the careful choice.

Minimum commitment: this week, close one account you no longer need, from inside the app or through its deletion page, before you uninstall it.

2. Updates

• R6 — Keep your software up to date, with automatic updates on, so privacy fixes reach you without a decision.

Minimum commitment: today, install any pending update and spend one minute in your privacy settings afterwards.

In short

• Good app hygiene starts with one question: is there an account behind this app?
• Deleting the app is not deleting the account. Close the account, cancel any subscription, then uninstall.
• Privacy labels on the App Store and Google Play are a one-minute check before installing, written by the developer.
• Updates are privacy too: some fixes stop apps reaching data they should not.

Related resources in this course

• Microphone and Camera Permissions: A 15-Minute Check
• Location Permissions: Choosing How Much Your Apps Know
• Lock Screen Privacy: What Your Phone Shows and Who Can Unlock It
• Privacy Dashboard: What ‘Free’ Services Know About You

Discover more companion resources from the online courses of the Protect Your Digital Privacy programme.