MAKATI, Philippines — Android permissions pile up the way lunch receipts pile up in a tote under a desk along Ayala Avenue. By Tuesday standup in a tower near Paseo de Roxas, a Makati office worker’s phone has often granted location, microphone, camera, nearby devices, notification access, and even admin-style controls to apps that have no business holding them. This is not a scare piece and it is not a lecture about buying a new device. It is a revoke list you can finish before the first meeting.
The phone in a Makati work bag is not a hobby gadget. It is the badge, the Grab pin, the GCash for the canteen, the camera for a whiteboard, the map from Magallanes to a client on the other side of EDSA. It also becomes a junk drawer. A flashlight that asked for the mic. A PDF tool that asked for every photo. A shopping app that still wants location after you have already walked from Ayala Triangle Gardens to Greenbelt. A “cleaner” that wants to be a device administrator so it can lock things you never asked it to lock.
Tuesday is a useful deadline because Monday is already a pile of email. Tuesday morning, before the stand-up, before the walk to Landmark for a charger you will not buy, you open Settings and you make the phone boring again. Boring is the point. A Makati office phone that is boring is harder to surprise, quieter in a meeting on the 20th floor, and less interested in following you through Salcedo after hours.
The six Android permissions below are the ones that most often sit on “Allow all the time” for no good reason. You will not jailbreak anything. You will not install a special tool. You will revoke, then grant again for one task if the app actually needs it. That is the whole method.
Samsung, Xiaomi, Oppo, vivo, and the plainer Androids Google ships all hide the same idea under slightly different labels. Look for Permission manager, Privacy, or the Permissions page inside each app. If your company put a work profile on the device, do this pass twice: once in personal, once in work. Do not mix them.
What this is not: a tour of how anyone attacks a phone. You do not need that. You need a smaller yes list.
1. Location: the Android permissions leak that still follows you past Ayala
Location is the permission that feels harmless because maps are useful. Maps are useful. Grab is useful. A food-delivery pin to a lobby on Ayala Avenue is useful. A shopping app that wants “Allow all the time” so it can notice you are near Glorietta is not a map. It is a habit you never agreed to out loud.
Open Settings, then Privacy or Security and privacy, then Permission manager, then Location. You will see a list of apps that can see where you are. Sort it with your actual week in mind. A Makati office week is a small geography: home, a jeep or the MRT at Ayala, a tower, a lunch orbit between Greenbelt, Landmark, and maybe a Salcedo place on Saturday. Very few apps need to watch that loop when they are closed.
Set the default in your head: while using the app, or only this time. Not always. Always is for the one or two tools that must work with the screen off, and even those deserve a second look. A weather widget that wants always-on location so it can “be accurate” can live on a city setting. Manila weather is not a secret you owe a widget. A step counter that wants location to prove you walked Paseo is a step counter that can count steps without a pin.
Grab, Google Maps, Waze, your bank’s ATM finder if you actually use it: while using is enough for almost every trip from Magallanes to a meeting in Bel-Air. If a ride app misbehaves when it is backgrounded, that is a reason to open it before you request the car, not a reason to leave always-on for a catalogue app you last opened during a 11.11 sale.
Revoke location entirely on flashlight apps, QR tools that can use the camera app instead, games, PDF signers, “cleaners,” photo editors, note apps that are not maps, and any brand you installed because a coworker forwarded an APK in Viber. If the app breaks for one task, grant while using, finish the task, revoke again. That extra tap is cheaper than a pin that follows you from RCBC Plaza to a Poblacion dinner.
What not to do: leave location on for a family-finder app you installed during a scare and then forgot. If you still want sharing, share it on purpose for a window of time, then stop. A parent in the province does not need a live trail of your walk from Ayala Triangle to the underpass. A partner does not need a forensic map of every coffee stop in Legazpi Village. If the relationship needs a tracker, the permission is not the real problem.
Also check precise versus approximate. A food app that only needs to know you are in Makati does not need the doorway of your tower. Approximate is enough for weather, news, and most shopping. Precise is for the pin the driver will actually use.
Do the location pass standing in the pantry if you have to. It takes less time than a microwave rice meal. Write one line in Notes if you share a family phone: maps and rides while using; everything else off. Tuesday, not “when I remember.”
2. Microphone: revoke the mic on apps that are not a call
The microphone is how you join a Teams meeting from a booth near the lift, how you send a voice note on the walk to the BGC bus, how you talk to a parent who still hates typing. It is also how a random app listens when you never opened it to listen. You do not need a thriller. You need a smaller list of apps that are allowed to hear the 20th floor.
Permission manager, Microphone. The list is often uglier than location because voice feels like a feature. Social apps want it for stories. Keyboard apps want it for voice typing. “Meeting assistant” tools want it so they can sit in a call you already have a laptop for. Games want it because a template asked. Flashlights want it because the developer copied a permission list.
Revoke the mic on anything that is not: the phone app, the one messenger you actually use for voice notes, the one meeting app your office requires, and the camera app if you record video on purpose. A second messenger can have the mic if you truly use voice notes there. If you do not, revoke. You can grant it for one conversation and take it back.
Samsung and other skins sometimes bury “voice assistant” or “Hey” listening as a separate toggle. Turn the always-listening wake word off if you do not use it in the office. An open-plan floor along Ayala is a bad room to have a phone that thinks its name was called. If you like the assistant at home in a quieter condo, keep it off at work and on at home. That is a routine, not a personality.
Keyboards with voice typing: if you use them, fine, while using. If you never tap the mic on the keyboard, revoke. A keyboard that can type does not need to hear Poblacion on a Friday.
What not to do: install a free “recorder” so you can capture a meeting instead of writing three bullets. If the meeting matters, take notes, or use the official tool your company already approved. A random recorder with a mic permission is not more professional. It is one more app that can hear the pantry.
If an app cannot send a voice note after you revoke, that is the app telling you the permission was real. Grant once, send the note, revoke. The extra tap is the price of a quieter pocket on the MRT.
Makati texture matters here. You sit in rooms with glass, with other people’s pipelines, with a client who did not ask to be in the background of a game that left the mic on. You also sit in Grab cars. Revoke first. Talk second.
3. Camera: the lens does not belong to a cleaner or a game
Camera permission is how you scan a QR at a canteen, how you snap a whiteboard before a client leaves, how you take a photo of a parking slot in the basement of a mall along Ayala. It is not how a battery “optimizer” does its job. A cleaner that wants the camera is not cleaning. A wallpaper app that wants the camera is not a wallpaper app. A game that wants the camera for an avatar you will never make is a game you can still play without a lens.
Permission manager, Camera. Same ruthless pass as the mic. Keep it for: the camera app, the one messenger you use for photos, the banking app if you still do the occasional ID or cheque scan, Google Lens or your QR tool if you actually scan, and work chat if your team lives on photo updates of a deck. Revoke it on the rest.
“Only while using” is the adult setting. A bank that needs a photo of a document can have the camera while you are inside the flow. It does not need the camera at 2 a.m. while the phone is face-down on a bedside table in a studio in Pio del Pilar. A shopping app that wants you to “search by photo” can have the camera for that one search. Then revoke.
QR codes are a Makati specialty: table tents in Greenbelt, lobby visitor systems, canteen payments, event check-ins at Circuit. You do not need five scanner apps. The camera app or the one payment app you already trust will scan. Uninstall the extra scanners so they stop sitting on the permission list with a lens they do not deserve.
What not to do: leave camera on for an app you used once to try a filter at a Poblacion bar. Uninstall the filter. The photo is already in Google Photos or not. The permission does not need to stay as a souvenir.
If your office uses a work profile, keep personal camera-happy apps out of the work side. A meme app does not belong next to the corporate email. If the company issued the phone, follow their rules and still revoke camera on anything they did not ask you to install.
Check the camera toggle also for apps that want to scan documents. Many of those will work by asking you to pick a file you already shot with the real camera. That is a better design. Prefer it.
Tuesday test: open the camera permission list and count how many names you cannot explain to a coworker in one sentence. Those are revokes.
4. Nearby devices: stop the scan that happens in a Salcedo lift
Nearby devices is the permission people skip because the name sounds like headphones. Headphones are part of it. Bluetooth earbuds on the walk from Ayala MRT to a tower are ordinary. Nearby devices is also a scanning right: apps that want to see other phones, speakers, watches, and random Bluetooth names in a lift in Salcedo, in a packed Glorietta walkway, in a cafe where half the laptops are on the same kind of call.
You use nearby features on purpose sometimes. You drop a PDF to a coworker with Quick Share or Nearby Share. You pair a speaker at a Friday thing in Poblacion. You connect a watch. Those are acts. They are not a reason for a shopping app, a game, or a “booster” to keep a scanning permission all week.
Permission manager, Nearby devices, or Nearby devices / Bluetooth depending on the skin. Revoke it on apps that are not: Bluetooth settings itself, the headphone or watch app you actually pair, the one file-transfer tool you use, and maybe the music app if it must find a speaker. A social app that wants nearby so it can “find friends in the room” is a social app that can use a QR or a username instead. Turn it off. An office lift is not a networking event for your phone.
Also look at Bluetooth scanning or “Bluetooth always on for scanning” if your phone offers it as a location-related toggle. If you are not using a finder tag, you do not need continuous scanning on the commute from Magallanes. Pair the buds. Then stop hunting.
File sharing should default to off, or to contacts only, or to a hidden setting you turn on for thirty seconds. A Makati pantry is a bad place to leave yourself visible as a receiver. You are not being unfriendly. You are not advertising a laptop named after your batch.
What not to do: install a third “share faster” app because a transfer failed once. Fix the failure by being on the same visible mode for one minute, then turn it off. Extra share apps are extra nearby permissions.
If you use a work badge that is just a card, it is not this permission. If you use a phone as a desk pass, that is a company setup. Do not grant nearby devices to random tools to “make the badge work.” Ask IT. That sentence saves more trouble than a forum thread.
Nearby devices is the quiet one. Location feels dramatic. Camera feels dramatic. This one just sits in a lift and collects a room. Revoke it before Tuesday so the lift is only a lift.
5. Notifications: if it can pop over a meeting, it can wait
Notification access is a permission and a habit. Makati meetings already have enough glass-wall theatre. A shopping banner that slides over a spreadsheet is not urgent. A game that wants a full-screen “you are needed” is not a bank. A cleaner that nags you hourly to “boost” is the reason the phone feels loud even when it is on silent.
Do two lists.
First, the ordinary notification list: Settings, Notifications, App notifications. Turn off the ones that are not a bank, a calendar, a ride, a work chat, a carrier OTP, or a family messenger. Shopping can live on a badge you open at lunch. Email already has a laptop. Social can wait until the walk to the MRT. You will not miss a Greenbelt sale that was going to change your life. You will miss a slide if a banner eats the projector moment.
Second, the deeper permission: notification access, or “apps that can read notifications,” or Notification listener. This is not the same as receiving a ping. This is an app that can see the content of other pings. Cleaners love it. “Comeback” launchers love it. Some music controllers need a narrow version of it. If a tool cannot explain why it must read your other apps’ notifications, revoke. A bank OTP that a random app can also see is a worse setup than a quiet phone.
Samsung’s bubble, chat heads, and “appear on top” sit next to this problem. If an overlay can draw on a password screen, it does not belong on a work phone. Turn appear-on-top off for anything that is not a tiny, known tool you can name. More on overlays is a different mess; here the rule is: nothing pops over a meeting except the one work app your lead already uses.
Schedule a quiet mode for the hours you are actually in the tower. Do Not Disturb from the time you badge in until the time you usually hit the Ayala station, with exceptions for the people who may call about a real problem: a parent, a partner, a lead, the bank. A flash sale is not a real problem. A Viber group from college is not a real problem.
What not to do: leave “priority” on for every app because you are afraid of missing something. You will miss the meeting instead. Missing a coupon is recoverable. Missing the client in the room is not a notification issue. It is a Tuesday issue.
If your work chat is loud, mute channels, not the whole job. The permission pass is for apps that should never have been loud. The culture pass is for the group that pings “quick question” forty times. Different jobs. Do the permission one first. It is the one you control before standup.
6. Device admin: the control you should never give a cleaner
Device admin, device administrator, device admin apps, special app access, accessibility that is not a real accessibility need: this is the last of the six and the one people grant because a screen said “enable to uninstall junk.” A booster that wants to be an administrator so it can lock the phone, freeze apps, or stop you from uninstalling it is not hygiene. It is a foothold you installed yourself.
Find it under Settings, Security, Device admin apps, or Special app access, or Install unknown apps, or Accessibility. The labels move. The idea does not. You should be able to name every app that has extra control over the device. If you cannot name it, deactivate it, then uninstall it.
Legitimate uses exist. A company work profile. A find-my-device feature you actually enrolled. A password manager that uses accessibility because that is how it fills a field, if you chose that manager on purpose. A bank’s extra shield if you enrolled it on purpose. Those are decisions. A “RAM booster” from a search ad is not a decision. It is a leftover.
Accessibility is powerful because it can tap for you. That is why a person who needs it should have it. That is also why a cleaner should not. If you turned on accessibility for a tool that promised to “auto-click” a reward game or to record a screen in a clever way, turn it off. Play the game with your thumb or do not play it at work.
Install unknown apps should be off except for the one moment you sideload something you already trust, and then it goes off again. A Makati office is a dense market of “sir, APK ko” in group chats. Default no. If the company needs an internal app, IT will have a path that is not a random toggle left on forever.
What not to do: deactivate a real work profile because this article said admin is scary. Read the name. If it is your employer’s management tool, leave it and ask IT how to keep personal apps out of that profile. If it is “Super Clean Master Pro,” deactivate, uninstall, restart, then check the list again.
If an app refuses to uninstall until you drop admin, that is the app telling you why this section exists. Drop admin. Uninstall. Do not negotiate with a cleaner.
Tuesday is a good day to also turn off the lock-screen widgets that show message previews. A phone face-up on a long table in a tower is a small billboard. Notifications on lock screen: hide contents, or off. You already did the permission pass. Now the table cannot read your bank.
A twenty-minute Makati audit you can finish before standup
You do not need a weekend. You need a pantry, a charger if the battery is being dramatic, and the Permission manager screen.
Minute one to five: location. Always-on becomes while using or denied. Precise stays only on maps and rides.
Minute six to ten: microphone and camera. Two lists. Same rule. If you cannot explain the lens or the mic to a person in the lift, revoke.
Minute eleven to fifteen: nearby devices and notification listeners. Headphones stay. Scanners and cleaners go. Shopping pings die. Work chat stays, but bubbles that draw on top go.
Minute sixteen to twenty: device admin, accessibility extras, install unknown apps. Deactivate what you cannot name. Uninstall. Restart if the list looks sticky.
Then walk back to the desk. The phone should feel the same except quieter. If an app breaks at lunch, you know which permission to grant for one task. That is a healthy break. A phone that never breaks because everything is allowed is not healthy. It is lazy.
If you commute through Ayala MRT, do this on the platform only if you can stand without becoming a traffic cone. The pantry is better. The toilet stall is worse: you will rush and grant something again because a popup looked official.
Write the six words in Notes if you like checklists: location, mic, camera, nearby, notifications, admin. Screenshot the permission manager after you are done so next month you can see what crept back. Apps re-ask. People tap Allow because they want the PDF. The screenshot is how Tuesday becomes a habit instead of a panic.
What a Makati work phone is allowed to keep
This list is not a vow of digital poverty. Keep the boring useful things.
Maps and rides: location while using, notifications for the actual trip.
Bank, GCash, Maya: notifications for OTP and transfers. Camera while using if a scan is required. No nearby. No admin. No “appear on top” unless the bank’s own flow truly needs it and you recognized the name.
Work email and chat: notifications, maybe camera for the whiteboard, mic for the one meeting app. Not location always. Not nearby.
One messenger for family: mic and camera while using. Notifications on. Lock screen previews off if you leave the phone on the table.
The camera app, the phone app, the SMS app that still catches OTPs: keep their obvious permissions. Do not replace SMS with a “cleaner that also handles messages.”
Headphones: Bluetooth. That is enough.
Everything else can earn a permission again later. Earning is the point.
If your office insists on a locator for a field team, that is a job policy. Put it in the work profile. Do not let a personal shopping app ride along on the same always-on pin.
Habits that keep the six from coming back
Revoke is a Tuesday. Creep is every install.
After every new app: open its permission page before you open the app itself. If the first screen is a wall of Allow, you can still leave. Play Store pages lie with screenshots. The permission page does not.
Prefer the official store. If you must use an internal company file, use the company’s path. If a vendor at Greenbelt wants you to install their loyalty APK, you can use a physical card. Loyalty is not worth admin.
Do not grant “allow all the time” because the app said a feature would be better. Features that need always-on can be named in one sentence. If the sentence is “so we can surprise you near a mall,” the answer is no. You already know you are near Glorietta. You can open the app if you want the mall.
Once a month, not only after a scare, open Permission manager again. New apps appear after a long weekend of boredom, after a conference at Circuit, after a cousin sent a game. The month pass is shorter than the Tuesday pass because you are only hunting newcomers.
If a popup appears while you are walking the underpass, do not tap with your thumb in a crowd. Pocket the phone. Tap later when you can read the name of the app. Crowds produce accidental yeses. Ayala at rush produces them by the minute.
If you sell the phone, or give it to a sibling in the province, factory reset after you revoke admin tools, because some of those tools fight a normal uninstall. Reset is the clean end. Revoking on Tuesday is the clean middle.
Bottom line
Android permissions are not a personality test. They are a Makati office list: location off always-on, mic and camera off for anything that is not a call or a photo, nearby devices off unless you are pairing or sharing for a minute, notifications off for shops and cleaners, admin off for anything you cannot name. Do it before Tuesday standup. Grant again for one task if the app is real. The towers along Ayala already hear enough. Your pocket does not need to join them.
Leave a Reply