App tracking in 2026 is sophisticated, persistent, and layered across multiple systems — advertising IDs, device fingerprinting, location data, and first-party tracking pixels all work in parallel. No single switch disables all of it, but a handful of targeted controls dramatically reduce the profile advertisers and data brokers can build on you. Here is what actually works.
What changed in 2026
- iOS App Tracking Transparency (ATT) is now in its fourth year. Apps that request tracking permission see 20–30 % opt-in rates; 70–80 % of users deny it. Ad networks responded with probabilistic fingerprinting, but ATT still reduces the precision of cross-app profiling significantly.
- Android's Privacy Sandbox rolled out fully — the legacy advertising ID is now restricted by default on Android 13+ devices, and users can delete it entirely.
- Google's cookie phase-out completed for Chrome in most regions — tracking shifted more heavily to first-party data and fingerprinting rather than third-party cookies.
- Consent Management Platforms (CMPs) on websites became more aggressive. Browser-level blocking is now more valuable than clicking "Reject All" on every CMP dialog.
iOS: the most impactful controls
App Tracking Transparency (biggest impact):
- Settings → Privacy & Security → Tracking → toggle off Allow Apps to Request to Track.
- This prevents apps from even asking permission to track you across other apps and websites.
- For apps already granted permission: on the same screen, review and revoke individually.
Location — the highest-value data:
- Settings → Privacy & Security → Location Services.
- For every non-navigation app (social media, shopping, news, weather): change from "Always" to While Using or Never.
- Turn off Precise Location for apps that do not need it — coarse location (city-level) is sufficient for weather; precise GPS is not.
Ad measurement:
- Settings → Privacy & Security → Apple Advertising → toggle off Personalized Ads.
Sensor and motion access:
- Settings → Privacy & Security → Motion & Fitness, Microphone, Camera — review and revoke for apps with no obvious need.
Android: key controls
Reset and disable advertising ID:
- Settings → Google → Ads → Delete advertising ID (Android 12+).
- On older devices: Reset advertising ID and toggle on Opt out of Ads Personalization.
Location:
- Settings → Location → App permissions — set all non-navigation apps to "Only while using the app" or "Deny."
- Turn off Precise location per-app.
Privacy Dashboard (Android 12+):
- Settings → Privacy → Privacy Dashboard — shows which apps accessed camera, microphone, and location in the past 24 hours.
Disable Google's cross-app tracking:
- Settings → Google → Manage your Google account → Data & Privacy → Ad settings → My Ad Center — turn off ad personalization.
| Control |
iOS |
Android |
Impact |
| Ad tracking opt-out |
ATT + disable |
Delete Ad ID |
High |
| Location to "While Using" |
Settings → Privacy → Location |
Settings → Location |
High |
| Microphone/camera review |
Settings → Privacy |
Settings → Privacy Dashboard |
Medium |
| Personalized ads off |
Settings → Apple Advertising |
Google → My Ad Center |
Medium |
| Browser tracking controls |
Safari → Privacy settings |
Chrome/Firefox settings |
Medium |
Browser tracking controls
Safari (iOS/Mac):
- Settings → Safari → toggle on Prevent Cross-Site Tracking and Hide IP Address.
- Intelligent Tracking Prevention (ITP) is on by default.
Chrome:
- Settings → Privacy and Security → toggle on Send a "Do Not Track" request (advisory only — most sites ignore it).
- For real protection, install uBlock Origin (available on Chrome desktop) — it blocks tracking scripts at the network level.
Firefox:
- Enhanced Tracking Protection is on by default in Strict mode for stronger coverage.
- uBlock Origin on Firefox provides the most comprehensive script-level blocking available.
Fingerprint resistance:
- Brave browser has built-in fingerprint randomization.
- uBlock Origin in advanced mode blocks many fingerprinting scripts.
- Browser fingerprinting cannot be fully eliminated, but these controls degrade accuracy significantly.
Common mistakes
Only denying ATT prompts on new installs. Check existing apps that were already granted tracking permission before ATT was introduced — they still have it.
Leaving location on "Always" for social apps. Apps with always-on location access build detailed movement logs. There is no social app that requires constant location access.
Using a free VPN for privacy. Many free VPNs monetize by logging and selling your browsing data — the opposite of the goal. A reputable paid VPN (or none at all) is better.
Expecting "Do Not Track" to work. The HTTP DNT header is not enforceable and is ignored by most advertising networks. Browser-level blocking is more effective.
What to skip
- Free "privacy" VPN apps that monetize your traffic — Mullvad, ProtonVPN, and a few others are trustworthy paid options; most free VPNs are not.
- Clearing cookies repeatedly as your main strategy — cookies are one vector; fingerprinting bypasses them entirely.
- Paranoid complete microphone/camera disabling for apps you use regularly — focus on apps that have no reason to need these permissions.
FAQ
Does airplane mode stop tracking?
It stops real-time data transmission but apps log data locally and upload it when you reconnect. It is not a meaningful tracking prevention strategy.
Can I be tracked if I deny ATT on every app?
App networks use probabilistic fingerprinting (device type, screen size, IP, time zone, etc.) as a fallback. ATT denial degrades tracking precision significantly but does not eliminate it entirely.
Does a VPN stop app tracking?
A VPN masks your IP address from apps and advertisers, but apps with advertising IDs, location permissions, and device fingerprints can still track you independently of your IP.
How do I know which apps are tracking me the most?
On iOS, Settings → Privacy & Security → Tracking shows apps with permission. On Android 12+, Privacy Dashboard shows recent access to sensitive sensors.
Where to go next
See How to set up two-factor authentication in 2026, How to remove malware in 2026, and How to secure your router in 2026.