App Privacy Report is a privacy feature built into iPhone that shows how apps use certain permissions and which internet domains they contact.
It can help answer questions such as: Which apps used my camera? When did an app access my location? Did an app use my microphone, photos or contacts? What domains are my apps connecting to? The report brings recent activity into one place so you can compare it with how you actually use your phone.
App Privacy Report is not a malware scanner or a hacking detector. It provides evidence about specific app activity, not a verdict about whether an app or device is safe.
What does App Privacy Report show?
The exact interface may vary slightly by iOS version, but the report is organized around four major information areas:
- Data & Sensor Access
- Shows when apps accessed privacy-sensitive data and sensors such as location, photos, camera, microphone and contacts.
- App Network Activity
- Shows internet domains contacted directly by apps or by content used inside those apps.
- Website Network Activity
- Shows domains contacted by websites you visited within apps.
- Most Contacted Domains
- Highlights domains contacted most frequently across your apps and in-app web content.
Together, these areas show recent access and communication patterns. They do not show the full contents of every connection or explain every event automatically.
How to turn on App Privacy Report
Open the feature in Settings and enable it:
Tap Turn On App Privacy Report if it is not already active. Collection begins only after you enable the feature. It cannot reconstruct activity that happened before activation, and useful information may take some time to appear as you continue using apps.
The report data is encrypted and stored on your device. If you turn App Privacy Report off, Apple says the collected report data is cleared from the device. You can enable it again later, but collection will begin again from that point.
What is Data & Sensor Access?
Data & Sensor Access shows how often and when apps accessed privacy-sensitive data or device sensors. Examples include:
- Location
- Photos
- Camera
- Microphone
- Contacts
This section helps separate permission from recorded access. A permission screen tells you that an app is allowed to use the camera. It does not mean the app used the camera continuously. App Privacy Report can show when camera access was recorded during the report window.
The same distinction applies to location, microphone, photos and contacts. An app can hold permission without using it during the period you review. Conversely, a recorded access event shows that use occurred, but you still need context to understand why.
For a step-by-step permission review, see how to check which apps access your camera, microphone, photos and contacts.
What is App Network Activity?
Apps communicate with internet domains for many ordinary reasons. They may load content, authenticate an account, synchronize data, retrieve media, call an API, measure performance, display advertising or connect to tracking-related services.
App Network Activity records the domains contacted directly by apps or from content within them. Open an app in the report to review its domain list and related timing information.
A domain entry shows that network contact occurred. It does not automatically reveal what information was transmitted, who initiated every part of the request or whether the activity was harmful.
Use the app's purpose and the activity time as context. A weather app may contact forecast services. A streaming app may contact media delivery networks. A sign-in process may contact an authentication provider. An unfamiliar name can be worth researching, but unfamiliarity alone is not evidence of misuse.
For a focused walkthrough, see how to see what domains and servers an iPhone app connects to.
What is Website Network Activity?
Websites opened inside apps can contact their own set of domains. Website Network Activity lists domains contacted by websites you visited within apps during the report window.
This distinction matters because some activity may be caused by displayed or embedded web content rather than by the app developer directly. Opening an article, loading a web-based help page or playing embedded media can add domains to the report.
What are Most Contacted Domains?
Most Contacted Domains highlights the domains reached most frequently across apps and websites. It provides a cross-app view that can reveal when the same service appears in several places.
A domain may appear often because it provides shared cloud infrastructure, analytics, advertising, authentication, media hosting, embedded services or tracking-related infrastructure. Frequency alone does not make a domain suspicious. A widely used cloud or media provider may receive many legitimate connections.
The useful question is which apps contacted the domain, when they contacted it and what those apps were doing. Seeing the same domain alongside its associated apps gives you more context than a frequency count alone. This is also why grouping domains by app becomes helpful in a larger investigation.
How far back does App Privacy Report go?
Apple’s App Privacy Report shows activity from the previous seven days. This applies to data and sensor access as well as the network activity sections.
It is not a permanent archive. A newly enabled report starts collecting from the time you turn it on, so the first view may contain only a short period. As older activity passes beyond the seven-day window, it no longer appears in the built-in report.
If you want to examine activity over longer periods, you can export reports and retain those files separately. That does not mean Apple stores unlimited history. It means you keep your own snapshots for later review.
Follow the workflow for saving and reviewing App Privacy Report history to plan exports and understand gaps or overlapping snapshots.
What should you look for in App Privacy Report?
Start with your expectations for each app. Useful things to review include:
- Camera or microphone access at an unexpected time.
- Location access that does not match how you use an app.
- Repeated sensor access that deserves an explanation.
- Unfamiliar contacted domains.
- Apps contacting an unusually large number of domains.
- Activity around a particular time you want to investigate.
- Changes after installing or updating an app.
Unexpected activity does not automatically prove malicious behavior, tracking or compromise. Background refresh, notifications, synchronization, analytics, advertising, embedded content and other legitimate functions can create events that are not obvious from the app interface.
Context matters. Compare the event with the app's purpose, the time it occurred and features you recently used. If access still seems unnecessary, review the app's permissions, App Store privacy information and privacy policy.
What App Privacy Report cannot tell you
App Privacy Report is evidence and context, not a verdict. It does not automatically tell you:
- Whether your iPhone is hacked.
- Whether malware is installed.
- Whether every contacted domain is dangerous.
- Exactly what data was transmitted in every connection.
- Why every connection occurred.
- Whether an app developer behaved maliciously.
The report also does not replace other privacy tools. Location sharing in Find My, App Tracking Transparency permissions and unwanted physical tracker alerts answer different questions. Read what you can actually check if you think your iPhone is being tracked to separate those systems.
How to export your App Privacy Report
Open Settings > Privacy & Security > App Privacy Report, then tap the Share button at the top of the report. Choose where to save or send the exported activity file. For example, you can save it in Files or send it to a Mac with AirDrop.
The export contains structured activity data in NDJSON format. NDJSON means newline-delimited JSON. It is a machine-readable text format where each line contains a separate JSON record. Some records describe data or sensor access, while others describe network activity.
You can open NDJSON in a text editor, but a large report is difficult to investigate manually. Events may cover many apps, domains, timestamps and activity types, and the format is designed more for structured processing than casual reading.
If you already have a file, read how to open and analyze an App Privacy Report NDJSON export.
When the built-in report becomes difficult to investigate
The built-in report works well for quick checks. Investigation becomes harder when you want to search many apps and domains, group domains by app, review one app as a whole, isolate a specific time window, compare reports or keep longer-term history.
App Privacy Report Analyzer is designed to make the information Apple already records easier to explore. It provides App Breakdown, Time Breakdown, domain grouping, domain and IP search, tracking indicators, multiple report history and activity comparison.
These views organize the exported evidence. They do not turn the report into a malware verdict and do not prove that every unfamiliar domain or unexpected event is harmful.
Make your App Privacy Report easier to explore
Search app activity, inspect contacted domains, review activity by time and keep multiple reports in one place.
Scan with iPhone
App Privacy Report quick start
- Open Settings > Privacy & Security.
- Turn on App Privacy Report.
- Use your iPhone normally.
- Return later to review Data & Sensor Access.
- Review App Network Activity and contacted domains.
- Check unexpected activity in context.
- Export the report if you want to investigate it in more detail.
App Privacy Report FAQ
Is App Privacy Report built into iPhone?
Yes. Apple includes App Privacy Report in iOS. You can find it under Settings > Privacy & Security.
Does App Privacy Report show camera and microphone access?
Yes. Data & Sensor Access can show when an app accessed the camera or microphone during the recent report window.
Does App Privacy Report show which websites apps contact?
It shows contacted internet domains, including domains reached by apps and by websites viewed within apps. It does not show the contents of every connection.
Can App Privacy Report tell if my iPhone is hacked?
No. It can reveal activity worth investigating, but it is not a malware scanner or hacking detector.
How long does App Privacy Report keep activity?
The built-in report shows activity from the previous seven days.
Does App Privacy Report work before I turn it on?
No. It begins gathering information after you enable it and cannot reconstruct earlier activity.
Can I export App Privacy Report?
Yes. Use the Share button on the App Privacy Report screen to save or send the structured activity file.