Browsing & Privacy
How to Manage Browser Permissions on an iPhone
Websites ask for location, camera, microphone and notifications. Here is how those requests work on iOS, and how to review what you have already granted.
Browser permissions work in two layers on iOS, and knowing which layer you are dealing with is what makes them manageable.
The two layers
Layer one: iOS grants the browser app a permission. The browser cannot access your location at all unless iOS has allowed the app to.
Layer two: a website asks the browser for the same thing. Even with the app permitted, each site must ask separately.
The consequence is useful: revoking a permission at the iOS level blocks it for every website at once, regardless of what you granted individually. That is your master switch.
Reviewing layer one
Settings › Privacy & Security, then check each category for your browser apps:
- Location Services — set to *Never* or *Ask Next Time* unless you regularly use map sites. Turn off *Precise Location* if you do allow it.
- Camera — only needed for video calls or QR scanning in the browser.
- Microphone — only needed for calls or voice search.
- Photos — set to *Limited Access* so uploads only expose the files you pick.
Alternatively go to Settings › Apps and select the browser to see everything it holds in one list.
What each permission exposes
Location
The most sensitive. Precise location is accurate to a few metres. Even approximate location identifies your neighbourhood.
Most sites asking for it do not need it. A news site wanting "local content" can use your IP address for that. Decline by default and grant only when you are actively using something location-based.
Camera and microphone
Only genuinely needed for video calls, QR scanning and voice input. iOS shows a green dot for camera and orange for microphone whenever either is active — if one appears unexpectedly, close the tab.
Notifications
Web push notifications are almost always a marketing channel. Declining costs you nothing on essentially every site.
Motion sensors
Accelerometer and gyroscope access, used by some games and AR features. Also usable for fingerprinting, since sensor characteristics vary slightly between devices.
A sensible default
Decline unless you know why the site needs it right now.
A site with a genuine need will ask again at the moment it matters, in context, where the reason is obvious. A site asking for location, notifications and camera the instant you land is not asking because a feature requires it.
Auditing what you have already granted
- Settings › Privacy & Security → check each category for browser apps.
- Turn on App Privacy Report in the same menu, leave it a week, then see which permissions were actually used and which domains were contacted.
- In the browser itself, look for a site settings or website data screen and clear entries you do not recognise.
- Revoke anything you cannot justify. If something breaks, it will ask again with a reason.
In Sqrl Browser, site data and history are stored on the device and can be cleared from the browser's own settings. The iOS-level permissions above remain the master control for anything the browser can reach.
The nuclear option
If a site keeps asking for something you keep refusing, revoke the permission from the browser at the iOS level. Then no site can ask, because the browser has nothing to offer.
Turn it back on temporarily on the rare occasion you actually need it. That is a better arrangement than leaving it permanently available to every page you open.
This is the browser-specific slice of a wider audit — how to review app permissions on your iPhone covers the rest of the device.