This unit has a useful peculiarity: some of the signals are shown to you by the operating system, explicitly and clearly.
The rest have to be looked for, and they concern the more delicate scenarios — the ones where somebody who knows you has configured something on your device or nearby.
It expands on the recommendation turning off Bluetooth and location.
The indicators the system shows
Recent devices actively flag the use of location, microphone and camera. It is worth knowing what they mean.
| Indicator | What it means |
|---|---|
| A location icon in the status bar | An app is accessing your location right now |
| A hollow or grey location icon | An app has set a recurring location request |
| A coloured dot at the top | Camera or microphone active |
| A periodic access notification | An app used location in the background recently |
The second indicator is the most useful and the least known: it signals a scheduled request, that is, an app that asked the system to be told when you move — without having to stay active.
The fourth row describes a function present on both main systems: a summary notification saying which apps used location while they were closed. If it appears for an app you did not expect, it is the most direct signal in this unit.
The signals in the device’s behaviour
A battery lasting far less than usual. Continuous access to location consumes power. The battery screen shows which app is responsible: if something you do not use appears, it is worth a check.
The device warming up for no apparent reason. The same mechanism.
Unexpected data use. Continuous collection that gets transmitted produces traffic. The usage statistics show which app generates it.
The phone being slow for no reason. A weak clue, but consistent with the others.
None of these is conclusive on its own: a battery lasting less has many ordinary explanations. They count when they all point at the same app.
The signals in the settings
These are the most reliable, because they are verifiable facts.
An app with “always” permission you do not remember authorising. The most common case: the permission was granted at first launch and forgotten.
Active location sharing with a person. In map and messaging apps there is always a list of who can see your location. It is the point that holds the most surprises.
A family location app installed. If you did not install it, somebody had access to the device.
A configuration profile added. Mobile systems have profiles that can set restrictions and behaviours. On a personal device there should be none, apart from declared company ones.
An active device administration app. It holds very broad permissions. It is worth checking it is only the organisation’s, if you have one.
Settings changed without you touching them. In particular: an app’s permission back on “always” after you had reduced it.
The small Bluetooth devices for finding objects have a legitimate use and an improper one. Manufacturers introduced an alert system precisely for the second.
What happens: if a tag that does not belong to you moves with you for a while, your phone warns you with a notification.
What to do if it appears:
- Do not ignore it. The notification only appears after the device has followed you, not on the first encounter.
- Use the search function the system offers: many tags can be made to sound.
- Check bags, pockets, suitcases, the car — luggage and vehicles are the typical places.
- If you find it, the system shows how to disable it.
- If the situation worries you, keep the device and consider going to the competent authorities.
One clarification, to avoid alarm: most of these notifications have ordinary explanations. A family member’s tag travelling with you, one on a colleague’s keys, somebody else’s object in the same car. The notification signals a possibility, not a fact.
What is NOT a signal
| What | Why it does not indicate a problem |
|---|---|
| The location icon during navigation | It is the map app working |
| An app asking for location at first launch | It is the intended behaviour: weigh it and answer |
| A battery lasting less over time | Batteries age |
| Seeing unknown Bluetooth devices in the list | They are other people’s devices in range: normal |
| A tag notification in a crowded place | Most likely somebody else’s object passing through |
| Location requested by the bank | It helps the anti-fraud checks |
The fourth row deserves a note: seeing other Bluetooth devices does not mean they are watching you. It is like seeing other people in a square.
The system’s periodic report
A function present on both main systems, little known and very useful: a summary of which apps used which permissions.
Where to find it. In the settings’ privacy section, with names that vary: privacy dashboard, privacy report, recent app activity.
What it shows:
- which apps used location, microphone and camera;
- when, on a timeline;
- how many times, which makes frequent collection obvious;
- in some cases, which servers they communicated with.
How to read it. You do not have to analyse all of it. Two questions are enough:
Is there an app appearing far more often than you use it? That is the signal of collection in the background.
Is there an app that used location at times when you did not touch it? The same thing, more obviously.
It is the best tool in this unit, because it turns a suspicion into a fact. And it takes two minutes, once in a while.
One clarification is worth making: seeing that an app used location does not mean it is doing anything improper. A weather app refreshing the forecast uses it legitimately. The report is there to let you decide whether that use is fine by you, not to identify culprits.
The delicate scenarios
It should be said clearly, because it is the situation where this unit is most useful.
The most frequent unwanted tracking does not come from strangers: it comes from people who have, or have had, access to the device — a partner, an ex-partner, a family member.
The specific signals are recognisable:
- a family location app you did not install;
- active location sharing you do not remember granting;
- your account linked to a device you do not recognise;
- permissions reverting after you reduced them;
- somebody showing they know where you have been without you telling them.
The last is the most concrete signal, and it is also the one people tend to rationalise.
If that description matches a real situation, some pointers: change your main account’s password from a different device; check the linked devices; check the active sharing. And, above all, talk to somebody you trust or to qualified services — because in these situations technical action alone may not be enough, and sometimes it is not even the right first step.
A five-point check
To be done once every few months, or when something does not convince you.
1. The privacy report. Two minutes: look at which apps used location and how many times. It is the starting point.
2. The “always” permissions. There should be very few. Every entry you do not recognise deserves consideration.
3. Active sharing. Across every app: maps, messaging, account services, family apps. It is the point that holds the most surprises.
4. The devices linked to your account. A device you do not recognise can see the location shared in the account.
5. Administration apps and profiles. On a personal device there should be none, apart from declared company ones.
Five minutes in all. The difference from other checks in this series is that here the results are immediately readable: nothing needs interpreting, you look at a list and decide.
Why some signals are only noticed if you look for them
A consideration explaining this post’s structure.
Modern devices have done a great deal to make the use of location visible: indicators, notifications, reports. They are signals designed to be noticed, and anybody who knows them already has much of what is needed.
But they cover one thing only: use by apps.
They do not cover sharing with people, which is a setting and not an access. They do not cover a family location app installed by somebody else, which from the system’s point of view is working correctly. They do not cover an account linked to a device you do not recognise.
| Kind of signal | Does the system show it? | Where it is found |
|---|---|---|
| An app is using location now | Yes, an indicator | The status bar |
| An app used it in the background | Yes, a notification | The privacy report |
| A person can see your location | No | The sharing list |
| A location app is installed | No | The app list |
| A device is linked to your account | No | Account settings |
| A tag is following you | Yes, a notification | A system alert |
The three rows with “No” are the ones requiring you to go and look, and they are also the ones covering the most delicate scenarios.
That is why the periodic check described above is not redundant beside the automatic indicators: it covers exactly what the indicators, by design, cannot flag.
How this connects to the Cyber Welfare Framework
| Pillar | What this content contributes |
|---|---|
| Awareness | Reading the indicators the system already shows |
| Skills | Telling verifiable clues from those with ordinary explanations |
| Secure Behaviour | Checking sharing and permissions instead of ignoring the notifications |
Reference level: FL3 — Autonomous.
Summary
- The system already shows when an app uses location: the indicator just needs reading.
- The summary notification about background access is the most direct signal.
- The sharing list is the point that holds the most surprises.
- Notifications about nearby tags almost always have ordinary explanations, but they should not be ignored.
One thing to do today. Look at your phone’s status bar right now. If the location icon appears and you are not using anything that needs it, open the settings and find out which app is using it.
Related content
- Turning off Bluetooth and location — the recommendation this expands on
- How to manage connections and location — what to do when you find something
- Consequences of location tracking — why these signals count
- Bluetooth attacks — what is realistic and what is not
Related resources
Short reads from the Resources section, for anyone who wants to stop on a single aspect:
Start with the first step: the Cyber Welfare Programme guides you free of charge, one recommendation at a time.
