How many times have you tapped on 'allow' option whenever you open any application or even a website on your phone -- be it ChatGPT, Google Gemini, Myntra, Paytm, WhatsApp and others? For most of us, it has become a habit. You open an app, a permission pop-up appears, and you click on 'allow' without thinking much.It feels like a small step but trust me, it isn't. That single tap is where your data journey begins. When you allow permissions, you are giving apps access to parts of your phone -- location, camera, photo gallery, microphone, contacts, storage and more. In some cases, it is necessary like maps for exact location. A camera app needs camera access. But the problem starts when apps ask for more permissions than they actually need and users
agree without checking.Once access is granted, data collection begins almost immediately.Apps or these brands start tracking what you search, what you click, how long you stay on a page and how you interact with content. Your phone information -- model, operating system, IP address -- is also recorded. If location access is enabled, apps can track where you are, sometimes even in the background (like we recently saw in the Rapido case).
And this is not limited to when you are actively using the app. Many apps continue collecting certain types of data even when they are running in the background. This makes the process less visible and for most users, completely unnoticed.And, to be honest, the bigger shift has come with AI.Earlier, data collection was largely about improving app performance or showing ads. Today, that same data is feeding Artificial Intelligence systems. Tools like Meta AI, ChatGPT and Google Gemini depend on large datasets to improve accuracy and responses. Even beyond chatbots, AI is now deeply integrated into apps, constantly analysing our behaviour.According to a recent study by researchers from Cornell University, smartphones with AI features are creating new privacy concerns for users. The study, published on
arXiv, says these phones can do many tasks automatically but they need constant access to personal and sensitive data.The study found that most people use GenAI features without fully understanding how they work. But when users learn more about how their data is used, they become more concerned about privacy.Companies have repeatedly denied using microphones for ad targeting. But the truth is AI systems track your digital behaviour across apps and websites. What you search, what you like, what you pause on, what you ignore, where you go, what you browse, all of this is analysed together.Every tap, scroll and search becomes a data point. You talk about a product once, and suddenly you start seeing ads related to it across platforms. Open Instagram or Facebook, both owned by Meta, and the ads feel too accurate. It creates the impression that your phone is listening to your conversations.
Scrolling Instagram Reels? You Might End Up Shopping Without Realising
Even if you only briefly interacted with something, the system connects multiple signals and predicts what you might want next. That is why the ads feel so accurate. It is not just listening it is learning as well. This same system is used across almost every major app.Shopping platforms like Myntra, Flipkart and Amazon track your browsing behaviour to recommend products. Payment apps use your usage patterns to push offers. Streaming platforms decide what you should watch next. Social media apps decide what you should see first. Ride-hailing platforms like Uber, Rapido, knows when you book a cab for office. Everything is driven by data and increasingly by AI.And, according to tech experts, the bigger story is what happens after data is collected."On the face of it once any app gets any kind of data they use it only for the purpose they have consent from the user. But in reality as soon as any data point lands with them they start exploring how they can monetise it. That's the hard reality,"
Faisal Kawoosa, founder, TechArc, told Times Now Tech. Kawoosa explains that once users grant app permissions, the data doesn’t just sit idle. In-house data analysts and product teams begin analysing it to extract meaningful insights and identify who this data could be useful for. This is where monetisation starts, often under the pretext of personalisation and recommendations."At the same time, we have to realise that today, after AI and data science have come into the picture, the use cases of data also evolve with time. For instance, an app had access to some data for a purpose, gets access to some more data in future and they see mixing of data is resulting in new use cases and opportunities to monetise," he said.Speaking to
Times Now Tech, Tarun Pathak, Research Director at Counterpoint Research, said 7 out of 10 consumers are not aware of the permissions granted to each app. Even after giving access, users face a bigger challenge -- limited control over that data and very little visibility into how and where it is being used."This is even more important as we head into an agentic era where user will have no idea on how individual permissions location or microphone or contacts are clubbed together to create a even more powerful profile of the user," Pathak said."App companies are currently managing this data in various ways like storage, processing and even third party sharing but to follow privacy laws, they must tell users exactly how it’s shared and how long it’s kept in a transparent way," he stressed.This is where the conversation moves beyond just permissions. According to experts, data collected today for one purpose may be used tomorrow for something completely different and AI is accelerating this process.With better algorithms and more computing power, many companies can now process massive amounts of data faster than ever before. This makes it easier to identify patterns, predict behaviour and create new ways to monetise user data.At the same time, your data does not stay only within one app.In many cases, it is shared with third-party partners -- advertisers, analytics firms and other service providers. This sharing is often mentioned in privacy policies, but rarely understood in detail by users.Once data moves beyond the original app, tracking becomes even harder to follow.There is also the question of storage. Most of this data is stored on company servers, sometimes for long periods. While companies say they follow security standards, risks still exist. Data breaches, leaks or misuse are not new, and when they happe large amounts of user information can be exposed.Once you become a victim of a data breach, your personal data can become public. It may end up on the dark web, where it can be sold or shared with countless people and companies.The reality is simple. Clicking 'Allow' isn’t just about turning on a feature. It is the start of your data being collected and moved. And once it moves, control becomes limited.This does not mean users need to stop using apps. But it does mean being more aware. Checking permissions, limiting access where not needed, and reviewing app settings regularly are small steps that can make a difference.