You can see exactly which apps have microphone access on your phone, in one screen, in under a minute. Both iPhone and Android also show a visible indicator the moment the microphone is actually in use. This page shows you where to look, what a microphone permission does and does not allow, and what the enforcement record says about the claim that your phone is listening to your conversations.
A microphone permission is not the same as a recording
Most apps that hold microphone permission never use it. The permission means the app can record while it is running with that access — not that it does, and not that it has. The two platforms treat that distinction as something you should be able to see, which is why both now show an indicator while a sensor is live.
Which apps use your microphone on iPhone
Apple's support documentation describes the status-bar indicators plainly: with iOS 14 or later, an orange dot or square means the microphone is in use by an app; a green indicator means the camera only, or the camera and microphone together.
To see which apps are allowed to use it, open Settings → Privacy & Security → Microphone. Every app that has been granted access is listed with a switch. Turn off anything that has no business recording — a shopping app, a game, a photo editor.
If you have never noticed an orange indicator, no app has been recording while you looked. The indicator is the difference between a permission sitting there and a sensor actually running.
Which apps use your microphone on Android
Android draws a privacy indicator when an app accesses the camera, the microphone or your location, and you can tap the indicator to see which app it is. According to the Android Open Source Project, microphone and camera usages count as active while the app is using them or for five seconds after — so the indicator also shows you what just happened.
On supported devices running Android 12 or higher, system settings include a Privacy Dashboard. Google's developer documentation describes it as separate screens for location, camera and microphone, each showing a timeline of when different apps accessed that data. That is the closest thing either platform has to a log of microphone use, and it is worth checking weekly.
To review permissions app by app: Settings → Privacy → Privacy Dashboard for recent access, and Settings → Apps → [app] → Permissions → Microphone to revoke access for a single app.
So is your phone listening to your conversations?
No regulator and no peer-reviewed study has produced evidence of phones continuously listening to conversations and selling what they say to advertisers. What the record does contain is companies that claimed exactly that, charged for it, and were caught.
- The FTC's "Active Listening" case. In May 2026 the FTC filed three complaints against Cox Media Group, MindSift LLC and 1010 Digital Works LLC, which sold a service branded "Active Listening" — described as software that listened to conversations picked up by smart devices in real time to place local ads. According to the FTC, the service did not use voice data at all; it was resold email lists from other data brokers at a significant markup, the ads were not accurately placed where customers had paid for them, and consumers had not opted in. The orders were finalized on 27 August 2026: CMG pays $880,000 and the two other firms $25,000 each — $930,000 in total, used to refund CMG's customers.
- The microphones are still real. Panoptispy, a peer-reviewed study in Proceedings on Privacy Enhancing Technologies (2018), analysed 17,260 Android apps and found apps holding media permissions they did not need, and third-party libraries recording and uploading screenshots and video without informing the user. The FTC's 2016 warning letters to 12 app developers over Silverpush code — which could monitor a microphone for inaudible audio beacons in television ads — show the same concern a decade earlier.
The shorter version of that answer, with the full detail of the FTC case, is in is your phone listening to you.
Where Malloc fits
Malloc does not claim your phone is unbreakable, and it does not claim to stop every threat. What it does is show you what your phone is doing:
- It alerts you when an app uses your microphone or camera.
- It shows the exact domains the apps on your device are contacting, so "who is this data going to?" gets a real answer instead of a guess.
- Detection runs 100% on your device — no cloud analysis of your activity. Malloc keeps no logs by design, and the Trust Centre states what that does and does not cover.
That covers the visible half of the problem. It does not change what an app can do with a permission you gave it, and it cannot promise that no app will ever misuse one. Malloc detects and reduces risk; it does not abolish it.
What to do now
- Open your microphone permissions and revoke them for every app that does not need them.
- Glance at the status bar. An orange (iPhone) or privacy indicator (Android) with no obvious cause is worth investigating.
- On Android 12 or higher, check the Privacy Dashboard once a week — it lists real recent microphone and camera use, not permissions.
- If you want to see where app data actually goes, not just that it can leave, use Malloc for Android or iOS.
Your conversations are not being harvested for ads. Your permissions are still worth a look. More on the wider mobile security picture is here.
Sources
- FTC, FTC to Require Cox Media Group, Two Other Firms to Pay Nearly $1 Million to Settle Charges They Deceived Customers About "Active Listening" AI-Powered Marketing Service, 21 May 2026.
- FTC, FTC Finalizes Orders with Cox Media Group, Two Other Firms, 27 August 2026.
- FTC, FTC Issues Warning Letters to App Developers Using "Silverpush" Code, 17 March 2016.
- Petracca et al., Panoptispy: Characterizing Audio and Video Exfiltration from Android Applications, Proceedings on Privacy Enhancing Technologies, 2018.
- Apple Support, About the orange and green indicators in your iPhone status bar; Apple, iPhone User Guide: Control access to hardware features.
- Android Open Source Project, Privacy indicators.
- Android Developers, Explain access to more sensitive information (Privacy Dashboard).