A permission list tells you what an app may access. Android’s Privacy Dashboard adds the missing dimension: when that access happened. This makes it a practical first stop when the camera or microphone indicator appears unexpectedly.
Open the timeline
On most current Android devices, open Settings > Security & privacy or Settings > Privacy, then choose Privacy dashboard. Menu wording varies by manufacturer.
Select Camera, Microphone, Location, or another permission to see a timeline of recent access. Google says Android 13 and later can show activity from the previous seven days, while Android 12 generally shows the previous 24 hours.
Match access to a real action
A timestamp is a clue, not automatic proof of abuse. A camera app, video-call service, voice assistant, QR scanner, accessibility tool, or browser tab may have a legitimate reason to use a permission. Compare the time with what you were doing and look for repeated access when the app was not in use.
Change the smallest necessary permission
Tap the application in the dashboard to reach its permission controls. Depending on Android version and permission type, choices may include:
- Allow only while using the app;
- Ask every time;
- Allow limited photos or selected media;
- Do not allow.
Use the narrowest setting that still supports the feature you need. A navigation app may need location while it is open without needing permanent background access. A messaging app can send text without microphone permission until you start a call or voice message.
Check global camera and microphone controls
Android also provides quick settings that can disable camera or microphone access at the system level. These are useful during sensitive meetings or troubleshooting, but remember that they affect every app. Turn them back on deliberately when required.
Investigate unfamiliar apps
If an unknown or sideloaded app appears in the timeline, inspect its installation source, accessibility access, device-admin privileges, notification access, and battery usage. Google warns that restricted settings can expose sensitive information when granted to an untrusted app. Do not enable them merely because an app displays a persuasive prompt.
Remove software you do not recognize, run Play Protect, update the device, and change important credentials from a trusted device if there is evidence of compromise.
A monthly two-minute dashboard review is more useful than a one-time permission purge. It connects privileges to actual behavior and makes unusual access easier to spot while the event is still recent.