How to Keep Your Personal Data Private on Your Smartphone — A Practical Guide for Indian Users
Your smartphone knows more about you than your closest friend. It knows where you sleep, because that is where you charge it every night. It knows your daily routine, because your location data traces every commute. It knows your health anxieties, because of what you search at 2 AM. It knows your financial situation, your relationship status, your political views, and the names of every person in your contact list.
Most of this data is collected not by criminals but by apps and companies operating entirely within the current legal framework — and shared with advertising networks and data brokers in ways that most users have never meaningfully consented to. In India, where the Digital Personal Data Protection Act 2023 is only now being implemented, the default posture of most apps is to collect as much as technically possible.
You cannot achieve complete privacy on a smartphone. But you can dramatically reduce your data exposure with a few hours of settings changes and some adjusted habits. Here is exactly what to do.
Step 1: Audit and Restrict App Permissions
This is the single most impactful action you can take. Most apps request permissions far beyond what they need to function. A flashlight app has no legitimate reason to access your contacts. A recipe app does not need your microphone. A shopping app does not need your call logs.
On Android: Go to Settings > Privacy > Permission Manager. Work through each category — Location, Microphone, Camera, Contacts, Call Logs, SMS — and ask honestly: does this app genuinely need this permission to do what I use it for? If not, revoke it.
For location specifically — the most sensitive permission — change every non-essential app from “Allow all the time” to “Allow only while using the app” or “Deny.” Food delivery apps need your location when you are ordering — not at 3 AM while you sleep.
On iPhone: Go to Settings > Privacy & Security and do the same review. iOS makes this somewhat easier with clear per-app breakdowns.
Step 2: Review What Google Knows About You
For most Indian Android users, Google is the single largest collector of personal data on their device. Go to myaccount.google.com and spend 15 minutes reviewing these sections:
- Web & App Activity: Turn off or set to auto-delete every 3 months if you do not use Google’s personalised recommendations
- Location History: Turn off unless you actively use Google Maps timeline features
- YouTube History: Turn off if you prefer not to have a profile built from your viewing habits
- Ad personalisation: Turn this off under Data & Privacy > Ad Settings — you will still see ads, but they will not be targeted based on your browsing history
Also go to Security > Your devices and remove any devices you no longer use or do not recognise.
Step 3: Switch to a More Private Browser
Google Chrome is the most popular browser in India — and also one of the most data-intensive. Consider switching to one of these:
- Firefox — open source, strong privacy defaults, trusted track record, excellent add-on support
- Brave — built on the same engine as Chrome so all websites work identically, but blocks ads and trackers by default. Noticeably faster on heavy websites
- DuckDuckGo Browser — simple, clean, blocks trackers automatically, includes a one-tap button to erase all browsing data
If switching entirely feels like too much change, at minimum install the uBlock Origin extension on your existing browser. It blocks thousands of trackers and advertising scripts on every page and is completely free.
Step 4: Adjust Your WhatsApp Privacy Settings
WhatsApp is India’s primary communication platform and its default settings reveal more than most users realise. Go to WhatsApp > Settings > Privacy and make these changes:
- Last Seen and Online: Change to “My Contacts” — stops strangers from tracking when you are active
- Profile Photo: Change to “My Contacts”
- Who can add me to groups: Change to “My Contacts” — dramatically reduces being added to spam or scam groups
- Read Receipts: Consider turning off — the person who sent the message will no longer see blue ticks, and neither will you
Also go to Settings > Chats > Chat Backup and check what is being backed up to Google Drive. WhatsApp’s end-to-end encryption protects messages in transit — but your Google Drive backup is stored unencrypted on Google’s servers unless you enable end-to-end encrypted backup in the same menu.
Step 5: Use Strong Passwords and Enable Two-Factor Authentication
This remains the single most effective protection against account compromise. A compromised email account can cascade into a privacy catastrophe — giving access to financial accounts, personal photos, contact lists, and private messages.
The practical solution for managing unique passwords across dozens of accounts is a password manager. Bitwarden is completely free, open source, highly trusted, and available on Android and iOS. It generates strong unique passwords for every account and stores them securely behind one master password.
For two-factor authentication, enable it on every account that offers it — particularly email, banking apps, and social media. Use an authenticator app such as Google Authenticator or Authy rather than SMS-based codes where possible, as SIM swap attacks can compromise SMS verification.
Step 6: Be Careful About What You Install
Every app you install is a potential data collection point. Before installing any new app, ask three questions: Do I genuinely need this? Is it from a developer I can verify? What permissions will it request?
Stick to apps from the official Google Play Store or Apple App Store. Third-party APK files downloaded from websites carry significantly higher malware risk. Be particularly cautious with free apps in categories like entertainment, utilities, VPNs, and casual games — these have the highest rates of aggressive data collection.
Periodically go through your installed apps and delete the ones you no longer use. A dormant app you forgot about may still be collecting data and running in the background.
Step 7: Use Encrypted Communication for Sensitive Conversations
For conversations where privacy genuinely matters — health concerns, financial decisions, legal matters — standard SMS is not adequately secure. WhatsApp encrypts messages in transit, which is good, but the metadata of who you talk to and when is visible to Meta.
Signal is the gold standard for private communication. It is free, open source, end-to-end encrypts both messages and calls, collects virtually no metadata, and has been independently verified by security researchers. It works exactly like WhatsApp. The only barrier is that the people you communicate with need to also use it — but for close family members or trusted colleagues, suggesting the switch is a short conversation.
A Realistic Expectation
Complete digital privacy is not achievable for someone who uses a smartphone and participates in modern life. The goal is not invisibility — it is informed control. Understanding what data you share, with whom, and reducing unnecessary exposure in areas where the risk is real and the protection is easy.
The steps in this guide take two to three hours total to implement. Most of them are one-time changes that protect you automatically going forward. In a world where your personal data is bought and sold without your knowledge, those two hours are among the most valuable you can spend on your own behalf.