Who Can See What on Your iPhone? Carrier, Wi-Fi, Apple and Apps

Every time you open an app or load a page, your iPhone is talking to several parties at once. Your carrier carries the signal. The Wi-Fi network you joined passes the traffic along. Apple runs the operating system and some of the services underneath it. Then there are the apps themselves, and the websites they connect to.

Each of them can see something different, and most people only think about one or two. Below, a single table shows who sees what. Next we cover what a private carrier and a VPN each change, then nine iPhone settings worth changing today. None of it takes more than a few minutes.

Who can see what on your iPhone

The short version: a VPN mostly changes what your carrier, the Wi-Fi network and websites can see. It does little to limit what Apple or the apps you're signed into can see.

Two things no tool on this list hides: what you do while logged into an account, and your GPS location if you've let an app use it.

What your carrier sees, and what a private carrier changes

Any mobile carrier has to see some things just to connect you. It needs to know which cell tower you're near so it can route your calls. It also handles your calls and texts and counts the data you use. Unless something hides it, it can also see which sites and services your phone looks up.

Carriers differ in what they do with that information. Large carriers have long used customer data for advertising and analytics, and sign-up usually means handing over your name, address and Social Security number.

Really takes a different approach. Really says it collects no personally identifiable information, lets you sign up without a name, address or SSN, keeps operational records short-lived, and doesn't sell customer data. It still has to process some information in real time to route your calls and texts, and lawful requests such as warrants still apply. A private carrier limits what it keeps and shares, but it can't blind the network itself.

What a VPN hides on your iPhone (and what it can't)

A VPN wraps your iPhone's internet traffic in encryption and sends it through a server run by the VPN provider. To your carrier and the Wi-Fi network, your browsing becomes one scrambled stream going to that server. Sites you visit see the server's address instead of yours. That protection covers every app, on cellular data and on Wi-Fi alike.

A VPN still has clear limits:

• Accounts: if you're signed into Google, Instagram or Amazon, they still see everything you do there.
• Location: apps with permission to use Location Services still get your GPS position. A VPN changes your IP address, not your GPS location.
• Malware: a VPN doesn't remove spyware or a malicious app already on the phone.
• Calls and texts: regular calls and SMS travel over the carrier network, not through the VPN.

For a deeper walkthrough of what a VPN actually does on your iPhone, including the gaps it leaves, The High Tech Society has a plain-English guide.

If you're on Really, you don't need to shop for one. Plans include Aura's VPN, which works on iPhone and covers both cellular and Wi-Fi traffic. Turn it on from the Aura app, and it shows up under Settings > VPN.

iCloud Private Relay vs a VPN

Private Relay is Apple's own privacy feature, and people often mistake it for a VPN. It's narrower. It covers browsing in Safari, the lookups your phone makes to find websites, and a small amount of older, unencrypted app traffic. Most traffic from your other apps bypasses it.

If both are on, the VPN takes over and Private Relay steps aside. Leaving Private Relay on does no harm, and it covers Safari whenever the VPN is off. You'll find it under Settings > [your name] > iCloud > Private Relay.

9 iPhone settings to change today

These nine settings handle the device and app side, which no carrier or VPN can fix. Most take under a minute each.

• Limit IP Address Tracking. Hides your IP address from known trackers in Mail and Safari. Settings > Wi-Fi > tap the (i) next to your network, and Settings > Cellular > Cellular Data Options. Leave it on for both.
• Private Wi-Fi Address. Uses a different hardware address on each network, so networks can't track your phone from place to place. Settings > Wi-Fi > (i) > Private Wi-Fi Address. Choose Rotating for public networks; it changes the address every two weeks.
• App tracking requests. Stops apps from asking to track you across other companies' apps and sites. Settings > Privacy & Security > Tracking > turn off Allow Apps to Request to Track.
• Location Services, app by app. Settings > Privacy & Security > Location Services. Set each app to Never, Ask Next Time, or While Using. Very few apps need Always.
• Precise Location. In the same screen, tap an app and turn off Precise Location for anything that only needs your city, such as weather or shopping apps.
• Safety Check. Shows who you're sharing your location and data with, and lets you cut it off in one step. Settings > Privacy & Security > Safety Check.
• Silence Unknown Callers. Sends calls from numbers you don't know straight to voicemail. Settings > Apps > Phone > Silence Unknown Callers. Really customers also get spam blocking and call screening from Aura.
• Mail Privacy Protection. Stops senders from seeing when you open an email and where you opened it. Settings > Apps > Mail > Privacy Protection > turn on Protect Mail Activity.
• Lockdown Mode, only if you need it. An extreme setting for people who may be targeted by sophisticated attacks, such as journalists or activists. It breaks some features, so most people should skip it. Settings > Privacy & Security > Lockdown Mode.

Public Wi-Fi on iPhone: a 30-second routine

Café, airport and hotel networks are where the Wi-Fi row of that table matters most. Run through this each time:

• Check the network name with staff before joining. Fake hotspots often copy a real name with one letter changed.
• Turn your VPN on as soon as the login page is done, before you open other apps.
• Keep Private Wi-Fi Address on Rotating for that network.
• Skip banking and shopping if the VPN won't connect. Use cellular data instead, since you aren't sharing that connection with strangers.
• Forget the network when you leave: Settings > Wi-Fi > (i) > Forget This Network. This keeps your phone from automatically rejoining it, or a lookalike copy.

FAQ

Can my carrier see my browsing history? Without a VPN, a carrier can usually see which sites your phone connects to, though not what you do on a secure (https) page. With a VPN on, it sees only encrypted traffic going to the VPN server.

Does a VPN drain my iPhone's battery? A little. Encrypting traffic takes some extra work, so expect slightly faster drain, mostly when signal is weak. For everyday use most people won't notice it.

Do I need Private Relay if I already have a VPN? No. The VPN covers everything Private Relay does and more. Leaving Private Relay on is still fine, because it protects Safari during any moment the VPN is off.