Apps Keep Undoing Your Privacy Settings — Here's How to Make Them Actually Stick
You spent twenty minutes locking down your privacy settings. Turned off ad personalization. Revoked location access. Opted out of data sharing. You felt good about it.
Then the app updated. Or you got a new phone. Or you logged into the same account on a different device. And quietly, without any notification, your settings went back to the defaults — which almost always means "share everything."
This isn't a bug. In a lot of cases, it's closer to a feature.
Why Your Settings Keep Reverting
Let's be direct about what's happening here. When a company sets the default to "share data" and your customized settings get wiped during an update, they benefit from that reset. More data gets collected. More profiles get built. More ad revenue gets generated. The incentive structure is not working in your favor.
That said, there are a few different mechanisms at play, and they're worth understanding:
App updates pushing new defaults. When an app ships a major update — especially one that changes its privacy policy or adds new data collection features — it often treats those new settings as fresh options that haven't been configured yet. So even if you opted out of something similar before, the new version of that setting starts at the default (which is usually "on").
Account sync overwriting device settings. This one catches a lot of people. If your settings are tied to your account rather than your device, and the account-level settings are different from what you've configured locally, the account version can win. This is common with Google, Meta, and Microsoft products.
Permissions getting re-requested after updates. iOS and Android both require apps to request permissions explicitly, but app updates can trigger new permission requests — and the way those prompts are designed often nudges you toward accepting.
Cross-device sync spreading bad settings. If you're logged into the same account on multiple devices and one of them has looser settings, a sync event can propagate those looser settings to all your devices.
The Apps and Platforms Most Likely to Do This
Not every app is equally guilty here. The ones most worth watching are those with the most to gain from your data:
- Google apps (Search, Maps, YouTube, Chrome): Google's privacy settings are spread across multiple dashboards — your Google account settings, the app-level settings, and the device-level settings can all interact in non-obvious ways. Updates frequently reintroduce settings you've previously turned off.
- Meta apps (Facebook, Instagram, WhatsApp): Meta has a long track record of resetting ad preferences and expanding data sharing permissions after updates. Their settings menus are also deliberately complex, which makes noticing a reset harder.
- Windows and Microsoft 365: Major Windows updates (especially feature updates) are notorious for resetting privacy-related settings. Telemetry, diagnostic data sharing, and personalized advertising settings are common casualties.
- Smart TV apps: Streaming apps on TVs update silently and frequently. ACR (Automatic Content Recognition) settings — which track what you watch — have a habit of reappearing after updates.
- Mobile apps with free tiers: Apps that monetize through advertising have structural incentives to keep data collection settings as permissive as possible.
How to Catch a Reset Before It Causes Problems
The first step is knowing when a reset has happened. A few practical ways to catch it:
Check app permissions after every major update. On iPhone, go to Settings → scroll down to the app → review each permission. On Android, go to Settings → Apps → select the app → Permissions. Make it a habit to do a quick scan any time you notice an app has updated.
Set a recurring calendar reminder. Once a month, spend ten minutes going through your key apps and checking that your privacy settings are still where you left them. This sounds tedious, but it takes less time than you'd think once you know where to look.
Watch for permission prompts carefully. When an app asks to "update" your settings or shows you a new permissions dialog, read it before tapping. The "Accept" button is almost always prominently placed; the "Not now" or "Decline" option is usually smaller and lower.
How to Lock Down the Settings That Matter Most
Here's a practical checklist for the platforms where resets are most common:
Google Account:
- Go to myaccount.google.com
- Click Data & Privacy
- Under History settings, turn off Web & App Activity, Location History, and YouTube History if you don't want those tracked
- Under Ad settings, turn off Ad personalization
- Return to this page after any major Google app update — these settings have been known to reset
Facebook/Instagram:
- On Facebook, go to Settings & Privacy → Settings → Ads → work through each section and opt out
- Check Privacy → Your Activity Off Facebook and clear it, then turn off future activity tracking
- On Instagram, go to Settings → Ads → turn off all data sharing for ads
- Go to Settings → Privacy & Security
- Work through General, Diagnostics & Feedback, Activity History, and Search permissions — set each one to your preference
- After any Windows feature update (the big ones that happen twice a year), come back and check these again
iPhone:
- Go to Settings → Privacy & Security → Tracking → make sure Allow Apps to Request to Track is off, or review which apps you've allowed
- Check Location Services and set each app to Never or While Using — not Always
- Under Apple Advertising, turn off Personalized Ads
One Habit That Changes Everything
Beyond the specific steps above, the single most effective habit is this: treat a privacy settings audit the same way you treat a software update. When something updates, you check your settings. Not every time for every app — that would be exhausting — but for the handful of apps that have your most sensitive data.
Write those apps down. Maybe it's five or six: your phone's OS, your primary email, your social media accounts, your browser. After any significant update to those, spend two minutes confirming your settings are still where you left them.
Companies are counting on the fact that most people won't notice when settings change. The ones who do notice — and who take five minutes to fix it — end up with meaningfully more control over their own data. That's a pretty good return on a pretty small investment of time.