Where it comes from, what it can see, whether it is kept up to date. UK guidance from Ofcom, the NCSC and the government's app code comes back to a few simple habits.
AI-generated image, not a photograph of a real person or place.
ASK WHY before you allow
Get apps from official stores
Allow only what makes sense
Update often, delete what you don't use
A tidier, safer phone
THE SHORT ANSWER
Choose with care, then keep it fresh.
Most app risks come down to three things. Where it came from, what it asks, how old it is.
STORES
Use official app stores
Ofcom warns that apps from unknown sources can be copies of popular apps with harmful extras added. Download from official stores and check reviews first.
Pick an example request to see what the guidance suggests. The bar shows how much reason there is to pause before tapping Allow.
Based on Ofcom's advice on using apps safely and the UK code of practice for app store operators and app developers.
TWO NUMBERS WORTH KNOWING
Lots of apps, not all of them used.
One figure on the apps we keep, one on how long an app can go without updates.
≈ ½
Downloaded apps not used regularly
Ofcom says its research found almost half of apps downloaded are not used regularly. Unused apps take up space, and some run in the background, slowing the phone and draining the battery.
UNUSED APPS · OFCOM
2 years
Time without an update before a store checks in
Under the UK code of practice, app store operators should contact a developer if an app has not been updated for 2 years, to check it is still supported.
STALE APPS · UK APP CODE
The government says the voluntary code is a world first. Its 2022 announcement put the mobile app market's revenue at more than £74 billion the previous year.
FOUR HABITS TO TRY
A ten-minute app tidy.
None of this needs special tools. It is about the settings and stores your phone already has.
Turn on automatic updates
The NCSC recommends it, so you do not have to remember. Update at home on wi-fi with the phone plugged in.
Delete what you don't use
Ofcom suggests going through your apps and removing the ones you no longer use.
Review permissions now and then
Read requests carefully and switch off any access you are not comfortable with.
Check your phone still gets updates
Older devices eventually stop receiving security updates. The NCSC suggests checking whether your model is still supported.
AI-generated image, not a photograph of a real person or place.
WHY THE STORE MATTERS
A copy can carry extras.
AI-generated image, not a photograph of a real person or place.
Ofcom describes how someone could take a popular paid-for app, add harmful elements and offer it free from an unofficial source. Once installed, it could let an attacker make calls, run up charges or intercept messages.
The UK app code asks app stores to vet apps with security checks before approval, to provide a way to report malicious apps, and to show what permissions an app may request, and why, before you download it.
Questions
Questions people ask
Is it safe to download apps from outside the app store?
Ofcom advises downloading apps from official app stores and avoiding unauthorised sources, because apps from unknown sources are more likely to be harmful copies.
Should I always say yes to app permissions?
No. Ofcom says to read permission requests carefully and, if you are uncomfortable, deny the request or look for another app. Under the UK app code, an app's main function should still work if optional permissions are switched off.
Why do apps need so many updates?
Updates fix security problems and often add improvements. The NCSC says applying them promptly is one of the most important things you can do to stay safe online.
Does deleting unused apps help?
Ofcom says unused apps take up space and some run in the background, which can slow your device and drain its battery. It suggests removing apps you no longer use.
What should I do before passing on an old phone?
Ofcom advises erasing all data and apps first, and notes that a factory reset might not delete all personal information.
