iPhone does not have one screen that shows everything an app does in the background. Use Battery for energy and background usage, Privacy & Security for permissions, and App Privacy Report for certain recorded data/sensor access and network activity.
When you ask “what is this app doing in the background?”, start by identifying what prompted the question. A warm phone, a microphone entry and a long domain list are different observations. Each needs a different first check, even if they eventually lead you to review the same app.
What do you mean by background activity?
Background activity usually means work occurring while an app is not the screen you are actively using. But battery consumption, refreshing content, access to a sensor and contacting a domain are separate things. One can occur without another being obvious in the interface.
An app might continue audio playback, synchronize information or finish a task after you leave it. A website displayed inside an app can also generate network activity. Those are possible explanations to compare with the evidence, not conclusions you can infer from any one event.
Write down your actual observation before investigating. “This app had background battery usage yesterday” is more useful than “this app is doing something hidden.” It gives you an app and a period to check.
Where can you check background battery usage?
Open Settings > Battery and inspect the available app usage details. Recent iOS versions include a View All Battery Usage option; labels and graphs vary by version. Look for the app and period relevant to your question, and review background usage information where shown.
Battery is the right starting point when your concern is power consumption. Its app breakdown can help explain which apps contributed to usage, but battery percentages are not a list of contacted servers or accessed files. A percentage also needs context about overall device use during that period.
If Battery shows activity when you were not using the screen, ask whether you had audio, navigation or another expected task running. For a time-focused review after sleep, see how to check overnight activity. Battery and privacy records may provide complementary clues without measuring the same thing.
Is Background App Refresh the same as all background activity?
No. Background App Refresh is a setting for allowing apps to refresh content while you are not actively using them. You can review it under Settings > General > Background App Refresh. It is a control, rather than a detailed history of work an app performed.
Turning it off can affect how promptly an app has fresh content ready when you open it. It should not be interpreted as proof that all background behavior, all network communication or all privacy-related activity has been disabled. Other app features and system mechanisms have their own rules.
If you change the setting to investigate a pattern, record when you changed it and use the app normally afterward. Compare later observations with earlier ones cautiously: a different usage routine can also change the result.
How can you check camera, microphone or data access?
Open Settings > Privacy & Security and review the resource relevant to your question. Camera, Microphone, Contacts, Photos and Location Services provide controls for access. A permission tells you what an app is allowed to do under that setting, rather than what it actually did at a particular time.
For “which apps used my microphone?”, recorded access is the more useful question. Use App Privacy Report’s Data & Sensor Access section for supported recent events. The camera, microphone, photos and contacts guide explains permission review and the live camera/microphone indicators in more detail.
If an app appears to have unnecessary access, reducing permission is a practical choice. You do not need a diagnosis of malicious behavior before deciding that a feature no longer needs access to your data.
What can App Privacy Report show about background activity?
App Privacy Report is an Apple iOS privacy feature. It can provide visibility into certain data/sensor access and network activity. Enable it at Settings > Privacy & Security > App Privacy Report, then review available app entries and their timing.
A recorded event at a time you were not actively using an app can be worth examining. However, the report is not a universal log of everything the app did, and a timestamp alone does not establish which process was executing or why. Avoid labeling every event outside screen use as a hidden background task.
For destinations, inspect App Network Activity and distinguish app-related communication from websites or embedded content. The network activity guide explains why multiple domains can be ordinary and why a connection does not establish what information was transmitted.
A practical way to investigate one app
- Choose the app and period that prompted your concern. Note whether the observation came from Battery, a privacy indicator or a report entry.
- Check Battery when the question is about energy use, and permissions when the question is about access an app currently holds.
- Inspect the app’s supported data/sensor and network entries in App Privacy Report.
- Compare recorded times with calls, audio playback, navigation, syncing or other features you remember using.
- Export the report before relevant data leaves the recent view if you want to investigate it later.
- If a pattern remains unexplained, consult the app’s privacy information or ask its developer about the specific app, time and type of activity.
Change one relevant setting at a time if you want a useful comparison. Removing several permissions, disabling refresh and changing your routine together makes it harder to tell which change explains a later difference.
When does an exported report help?
App Privacy Report Analyzer is a separate iPhone/iPad application for exploring exported App Privacy Report data. Importing a .ndjson report can make it easier to review one app, filter supported activity and investigate a particular day or time range.
This is useful when the evidence is scattered across apps and destinations, or you want to revisit an earlier saved snapshot. Read how to open the exported file and how to retain report history for those workflows.
The analyzer organizes imported evidence. It does not capture every background action, intercept network traffic live, prevent tracking or determine conclusively whether a phone is hacked. The goal is to understand recorded activity well enough to make an informed decision about an app and its permissions.
Review the activity in your report
Explore imported sensor access, network destinations and time ranges when a quick Settings check needs more context.
Scan with iPhone