iOS 13 Security & Privacy Tips: 12 Settings

To improve security and privacy on iOS 13, you should immediately review Location Services, Safari settings, and app permissions—these are the three areas where most data leaks occur. The following guide walks you through the most impactful settings changes, explains what each one does, and helps you lock down your iPhone or iPad without breaking everyday functionality.

Background: Why iOS 13 Changed the Privacy Game

iOS 13, released in September 2019, introduced several privacy-focused features that were revolutionary at the time. It was the first version to require apps to request location access with more granularity—giving users the “Allow Once” option. It also added Sign in with Apple, a federated login system that hides your email address from third-party apps. Background app refresh and Bluetooth permissions were also tightened, meaning apps could no longer silently scan for nearby devices without explicit consent. Understanding these changes is key because many older guides and muscle-memory habits from iOS 12 or earlier will not apply. If you skipped iOS 13 and jumped straight to a later version, most of these menus have remained largely intact, but a few labels have changed slightly in iOS 14 and 15.

How to Lock Down Location Services

Location data is the most sensitive information on your phone—it reveals where you live, work, and sleep. In iOS 13, Apple made it much easier to control. To review your settings, go to Settings > Privacy > Location Services. You will see a list of every app that has requested location access. For each app, you have four options: Never, Ask Next Time, While Using the App, and Always. The safest approach is to set every app to While Using or Never, except for essential navigation apps like Maps or Find My. A common mistake is leaving system services enabled that you do not need. Scroll to the bottom of the Location Services screen and tap System Services. Here, you can disable things like Location-Based Suggestions, iPhone Analytics, and Routing & Traffic—none of which are critical for daily use. The one you should keep on is Find My iPhone, as it is crucial for locating a lost or stolen device.

Safari and Web Browsing Privacy

Safari in iOS 13 includes several features that prevent trackers from following you across the web. The most important is Prevent Cross-Site Tracking, which is enabled by default. To check, go to Settings > Safari > Privacy & Security. You should also enable Block All Cookies if you are extremely privacy-focused, but be aware that this will break login sessions on many websites—you will have to log in every time you visit. A better middle ground is to leave cookies enabled but regularly clear your history and website data. Another useful setting is Fraudulent Website Warning, which should always be on. For search engine privacy, consider switching from Google to DuckDuckGo in Settings > Safari > Search Engine. DuckDuckGo does not track your searches or build a profile of your browsing habits. If you want to go further, you can install a content blocker like 1Blocker or AdGuard from the App Store, which will block trackers and ads at the network level.

App Permissions: The Hidden Dangers

Apps often request permissions that are not necessary for their core function. A flashlight app does not need access to your contacts, and a simple game does not need your microphone. In iOS 13, you can review all permissions in one place: Settings > Privacy. Go through each category—Contacts, Photos, Microphone, Camera, Bluetooth, and Health—and see which apps have access. For Photos, you have the option to grant Selected Photos rather than the entire library. This is a huge privacy win because many apps upload your entire photo library to their servers. The same applies to Contacts: if an app requests access, you can deny it and still use the app. A good rule of thumb is to deny all permissions by default and only grant them when an app’s feature genuinely requires it. For example, a social media app needs camera access to take a photo, but it does not need your microphone unless you are recording video.

Sign in with Apple and Password Management

One of the best privacy features in iOS 13 is Sign in with Apple. When you see this option on a website or app, it creates a unique, random email address that forwards to your real one. This prevents companies from linking your email across different services. It also supports Face ID or Touch ID for authentication, so you do not have to create a new password. For existing passwords, iOS 13 includes a built-in password manager in Settings > Passwords & Accounts > Website & App Passwords. Here, you can see if any of your passwords have been compromised in known data breaches. The system will also suggest strong, unique passwords when you sign up for new services. If you have been using the same password everywhere, now is the time to change it. A password manager like 1Password or LastPass is still a good idea if you need to access your passwords on non-Apple devices, but the built-in one is sufficient for most people.

Network and Bluetooth Security

iOS 13 added a critical privacy feature: apps must now ask for permission before using Bluetooth. This prevents apps from silently scanning for beacons or other devices to track your location. If you have granted Bluetooth access to an app that does not need it (like a weather app), revoke it in Settings > Privacy > Bluetooth. For Wi-Fi, iOS 13 also randomizes your MAC address when you join a network, which prevents network operators from tracking your device across different Wi-Fi hotspots. However, this feature is only enabled for networks you join with the Private Address toggle on. To check, go to Settings > Wi-Fi, tap the info icon (i) next to a network, and ensure Private Address is on. For cellular data, you should review which apps can use cellular in Settings > Cellular—this not only saves data but also prevents apps from sending data in the background when you are not on Wi-Fi.

Common Problems and Misconceptions

A common misconception is that turning off Location Services entirely will protect your privacy. In reality, this can break Find My iPhone and emergency services, and it may actually make your phone less secure because you cannot locate it if stolen. Another problem is that many users disable Background App Refresh to save battery, but this is not a privacy feature—it only stops apps from updating in the background. If you want to prevent apps from tracking you in the background, you should revoke their location and Bluetooth permissions instead. Another issue is that some apps will not work if you deny them location access. For example, a weather app might refuse to show a forecast without your location. In that case, you can set it to While Using and then deny it when you are not actively using it. Finally, many people are unaware that iOS 13 includes a Record Screen indicator—a small orange dot appears at the top of the screen when an app is using your microphone, and a green dot when the camera is in use. If you see these dots unexpectedly, an app is recording you, and you should investigate.

Frequently Asked Questions

Does iOS 13 have a built-in VPN?

No, iOS 13 does not include a built-in VPN. However, it supports VPN protocols like IKEv2, IPsec, and L2TP, and you can configure a VPN manually in Settings > General > VPN & Device Management. For better privacy, consider using a reputable third-party VPN app, but be aware that free VPNs often log your data. Always read the privacy policy before installing one.

How do I stop apps from tracking my location in the background?

Go to Settings > Privacy > Location Services and set each app to While Using the App or Never. Also, scroll to System Services and disable any that are not essential, such as Location-Based Suggestions or iPhone Analytics. This will stop apps from accessing your location when they are not open.

Is it safe to use public Wi-Fi with iOS 13?

Public Wi-Fi is inherently risky because anyone on the same network can potentially intercept your traffic. iOS 13 includes a feature called Private Address that randomizes your MAC address, which helps prevent tracking, but it does not encrypt your traffic. Always use a VPN when connecting to public Wi-Fi, and avoid logging into sensitive accounts like banking apps.

What is the difference between “Allow Once” and “While Using”?

“Allow Once” grants an app access to your location for a single session, then it reverts to Ask Next Time. “While Using” allows access whenever the app is open in the foreground. For most apps, While Using is sufficient, but for a one-time need like checking in on a map, Allow Once is safer because it does not leave a persistent permission.

Will enabling all these privacy settings break my apps?

Most apps will still function, but some may require certain permissions. For example, a ride-sharing app needs your location to pick you up. If you deny it, the app will not work. The key is to grant permissions on a case-by-case basis and revoke them when you no longer need them. You can always re-enable permissions later if an app stops working.

Does iOS 13 protect me from phishing attacks?

iOS 13 includes Fraudulent Website Warning in Safari, which blocks known phishing sites. However, this is not foolproof. Always check the URL before entering credentials, and never click on suspicious links in emails or text messages. Using a password manager can also help because it will not autofill your password on a fake website.

Related

• Facebook Live: How to Go Live and Grow Your Audience
• Remote Control Windows PC from Android: Full Guide
• Zune vs iPod: Key Differences Explained