The permission prompt is the only moment where anyone asks your opinion, and it is designed to be got past. Two buttons, one of which is highlighted, in the way of the thing you were trying to do. Nobody reads it. But there are only three real questions behind every prompt, and once you can name them the two seconds are enough.
The Mismatch Is the Signal
Do not ask whether the request is big. Ask whether it fits. A maps app wanting your location fits perfectly — that is the product. A photo editor wanting your photos fits. A flashlight wanting your contacts does not fit, and no amount of small print makes it fit.
This is the single most useful reflex, because it needs no technical knowledge. You already know what the app is for. Hold the request next to it and see whether one explains the other.
Three Questions, Not One
The prompt usually tells you this one, and it is the question people stop at. Photos, location, microphone, contacts, files.
This is almost never in the prompt, and it is where most of the surprises live. Information can be collected reasonably and then shared onward with companies you have never heard of. An app being honest with you is not the same as an app keeping things to itself.
Almost nobody asks, and it decides how much the first two matter. Something held for a day and something held forever are not the same decision, even if the wording is identical.
Other People Are in Your Phone
Most permission questions are about you. One is not. Your contact list is made of other people, your camera roll is full of other people, and a shared class document has everybody's name in it.
When an app asks for those, you are answering on behalf of people who were never asked and will never know. That does not make it automatically wrong, but it is the moment worth an extra five seconds, because it is the only one where the cost lands on someone else.
What "Free" Is Paying For
An app with no price still costs money to build and run. That money comes from somewhere, and often the somewhere is information about the people using it. This is not a conspiracy and it is not always a problem — it is just the arrangement, and knowing it exists changes how a free app that wants a lot of access reads.
The useful question is not "is this free app evil". It is "if I am not paying, what is it getting instead, and am I fine with that?"
Reading a Prompt in Ten Seconds
- Name what the app is for, in four words.
- Read what it is asking for.
- Ask whether the first explains the second.
- If the request covers other people — contacts, photos of others, a class list — pause on that specifically.
- If it does not fit, deny it. Most apps keep working, and the ones that refuse to have told you something.
Eight of the twenty-four situations in the Digital Ethics & Citizenship test sit in this area, and several of them are written so that the app is not doing anything obviously sinister — the problem is that the data is kept far longer than the task needs, or handed to a partner nobody mentioned. Those are the ones people miss.