Your smartphone, laptop, and smart home devices are constantly broadcasting your location, habits, and personal data to local networks, third-party apps, and even strangers nearby. While global privacy settings often dominate headlines, local privacy—the data you share within your immediate physical environment—is frequently overlooked. Failing to adjust these settings can expose your home address, daily routines, and sensitive communications to anyone within Wi-Fi or Bluetooth range. Below are five critical local privacy settings you need to change immediately, each backed by security research and practical steps.
1. Disable Bluetooth and Wi-Fi Scanning in System Settings
Modern operating systems use Bluetooth and Wi-Fi scanning to improve location accuracy, even when you have turned off the main connectivity toggles. On both Android and iOS, toggling Bluetooth or Wi-Fi off in the quick settings panel often only disconnects active connections, not the underlying scanning services. This means your device continues to broadcast unique identifiers (MAC addresses) and probe nearby access points, allowing local attackers to track your movement through stores, offices, and neighborhoods.
How to change it:
- Android (version 10+): Go to Settings > Location > Wi-Fi and Bluetooth scanning. Toggle both off. This prevents apps and system services from scanning even when Wi-Fi and Bluetooth are disabled.
- iOS (iPhone): Settings > Privacy & Security > Location Services > System Services > Networking & Wireless. Toggle off. Also disable “Share My Location” under the same menu.
- Windows 11: Settings > Privacy & Security > Location. Turn off “Wi-Fi scanning” and “Bluetooth scanning” under the “Location” section.
- macOS Ventura+: System Settings > Privacy & Security > Location Services. Click the lock icon to edit, then uncheck “System Services” and disable “Wi-Fi Networking.”
Why it matters: Without these changes, your phone anonymously pings every commercial Wi-Fi router you pass. Researchers have used this data to recreate users’ daily paths with 90% accuracy. Disabling scanning reduces your digital footprint in public spaces and prevents third-party data brokers from associating your device with specific locations.
2. Revoke Location Permissions for Preinstalled Weather, Maps, and Camera Apps
Default apps often request “Always” location access, a setting that allows them to track you even when you are not using the app. A 2023 privacy audit of stock Android and iOS devices found that preinstalled weather widgets and camera apps transmitted location data to third-party analytics servers every 15 minutes, even when the app was backgrounded. Worse, these apps lack the permission-review warnings that third-party apps have, making them a blind spot for most users.
How to change it:
- iOS: Settings > Privacy & Security > Location Services. Scroll through every app. For Weather, Maps, and Camera, change from “Always” to “While Using the App” or “Ask Next Time.” For the Compass app, set to “While Using.”
- Android: Settings > Location > App location permissions. Review each preloaded app. For example, set Google Maps to “While in use” and disable “Allow background location” for Weather and Camera.
- Pixel/Stock Android: Also check Settings > Apps > See all apps. Tap each preloaded app like “Device Health Services” and “Wallpapers” to revoke location if not needed.
Why it matters: A weather app that records your location every 15 minutes creates a detailed timeline of your home, work, and leisure spots. Combining this with metadata from other services can reveal your religious affiliations, medical visits, or personal relationships. Changing permissions to “While Using” limits the data collection window to active use only.
3. Turn Off “Find My Device” Network Sharing (Cross-Device Location)
Apple’s Find My network and Google’s Find My Device network use crowdsourced Bluetooth signals from nearby devices to locate lost items. While convenient, these features turn your phone into a permanent location beacon for any device in the network. When you enable “Find My network” or “Offline finding,” your device broadcasts a rotating Bluetooth key that can be used by any other device in the network to report your location. This effectively makes your phone part of a global tracking grid that works even if you have disabled GPS.
How to change it:
- iOS: Settings > Your Name > Find My > Find My iPhone. Toggle off “Find My network.” Note: this disables the ability to locate your offline devices but prevents your phone from acting as a relay for others.
- Android: Settings > Google > Find My Device. Toggle off “Find My Device” entirely, or at least turn off “Use location” and “Use Wi-Fi & Bluetooth scanning” under the same menu. For Samsung devices: Settings > Biometrics and security > Find My Mobile > Offline finding. Toggle off.
- Windows 10/11: Settings > Update & Security > Find My Device. Toggle off. Also check Settings > Privacy & Security > Location > “Find My Device” and disable.
Why it matters: Security researchers demonstrated in 2022 that an attacker with a $50 Bluetooth scanner could track Find My network beacons to identify when a target leaves their home or office. Disabling the network sharing component prevents your phone from being used as a surveillance node.
4. Restrict App Access to Local Network (LAN) Discovery
Your phone and computer can automatically discover other devices on your local Wi-Fi network—printers, smart TVs, shared folders, and other users’ devices. Apps like social media platforms, media players, and shopping apps frequently request permission to scan the local network. This permission allows them to enumerate every device connected to your home router, including smart locks, baby monitors, and medical devices. A malicious or compromised app can use this data to map your home network and identify vulnerable hardware.
How to change it:
- iOS 14+: Settings > Privacy & Security > Local Network. Review the list. Disable any app that does not need to discover devices on your network (e.g., a weather app, a calculator, or a game). Legitimate needs: streaming apps like Plex, file-sharing apps, and smart home controllers.
- Android 11+: Android does not have a centralized local network permission toggle. Instead, you must manage per-app permissions. Go to Settings > Apps > See all apps. Select an app > Permissions > Additional permissions > “Access to nearby devices.” Disable for any app that does not require peer-to-peer connections.
- Windows 11: Settings > Privacy & Security > Location > “Let apps access your location” > Manage > Turn off for individual apps that do not need network discovery (e.g., a text editor). Additionally, in Settings > Network & internet > Wi-Fi > Manage known networks > Select your network > Properties > “Make this PC discoverable” set to Off.
- macOS: System Settings > General > Sharing. Uncheck “Content caching” and “File Sharing” if not needed. For app-specific restrictions, go to System Settings > Privacy & Security > Files and Folders and limit app access.
Why it matters: In a 2021 study, 40% of free Android apps with network permissions were found to probe local IP ranges, potentially exposing smart home devices to remote attacks. By restricting LAN access, you prevent apps from cataloging your IoT ecosystem.
5. Disable Automatic Connection to Open and Public Wi-Fi Hotspots
Smartphones and laptops are configured by default to automatically join open Wi-Fi networks (those without passwords) and public hotspots from carriers or device manufacturers. This convenience creates a severe privacy risk: your device broadcasts its previous network names (preferred network list, or PNL), allowing attackers to set up fake hotspots with matching SSIDs. Once connected, the attacker can intercept all unencrypted traffic and inject malicious content. Additionally, automatic connection often enables “Wi-Fi Assist” (iOS) or “Switch to mobile data” (Android), which uses your cellular data as a fallback, but still exposes your device to the untrusted network.
How to change it:
- iOS: Settings > Wi-Fi. Toggle off “Ask to Join Networks” (set to “Off” or “Notify”). Scroll down and tap “Auto-Join Hotspot” and set to “Never.” Also disable “Wi-Fi Assist” in Settings > Cellular > Wi-Fi Assist.
- Android: Settings > Network & internet > Internet. Tap the gear icon next to your Wi-Fi network. Toggle off “Auto-connect.” For public hotspots: Settings > Network & internet > Internet > Network preferences > “Connect to public networks” toggle off. On Samsung: Settings > Connections > Wi-Fi > Advanced > “Switch to mobile data” off.
- Windows 11: Settings > Network & internet > Wi-Fi > Manage known networks. Select each network and choose “Forget” for all public hotspots. Turn off “Connect to suggested open hotspots” and “Connect to networks shared by my contacts.”
- macOS: System Settings > Network > Wi-Fi > Advanced. Uncheck “Remember networks this computer has joined” and “Auto-join supported networks.” Check “Ask to join networks” and set to “Prompt.”
Why it matters: The “Wi-Fi Pineapple” attack, widely used by penetration testers, exploits automatic connection to clone trusted network names. A 2023 report by Kaspersky found that 78% of public Wi-Fi networks analyzed had weak encryption or no encryption at all. Disabling auto-connect forces you to manually verify networks, preventing silent data exposure.
By systematically configuring these five local settings, you drastically reduce the attack surface for anyone in your physical proximity. Each change takes less than 60 seconds to implement but provides a layer of defense against tracking, network mapping, and data interception that global privacy toggles cannot address.