English is the default.
A worked example

Allow access only when the feature needs it

One exchange at a time. Read what changes, then explain it in your own words before moving on.

Read the full lesson
  1. Meet the components
  2. Follow the steps
  3. Compare an example
  4. Check your understanding

Interactive example

Steps1. Access requested 2. Allow 3. Data accessible
Click a box or choose its name to learn what it means.
An appReadyYour choiceReadyContacts /locationReadyAn appReadyYour choiceReadyContacts /locationReady
Ready to traceUnneeded access allowed
Before you start · 3 steps

Unneeded access allowed

A permission can expose information unrelated to the feature you wanted.

How to use this example

Select Next step to read at your own pace, or Animate step to watch one exchange. Nothing advances until you choose.

Inspect components & read every step
  • An app

    Software asking to use a device capability or some information.

    Example: A map app asks for location to show nearby directions.

  • Your choice

    Your decision to allow or deny the access an app requests.

    Example: You allow location only while using a feature that needs it.

  • Contacts / location

    Personal information about people you know or where you are.

    Example: A flashlight feature normally has no clear need for your contact list.

Unneeded access allowed

A permission can expose information unrelated to the feature you wanted.

  1. An app Your choice: Access requested. A simple utility requests your contacts.
  2. Your choice An app: Allow. The broad request is approved.
  3. Contacts / location An app: Data accessible. The app can use the information covered by that grant.

Unneeded access denied

Deny unnecessary access; allow a narrower option when a legitimate feature needs it.

  1. An app Your choice: Access requested. The utility requests information unrelated to its purpose.
  2. Your choice An app: Deny. You decline this unnecessary permission.
  3. Your choice Contacts / location: Review settings. Review existing grants in the device or browser settings.

Fictional teaching trace. One moving dot represents an exchange, not a measured network capture.