Metlivi Blog

Keep location access only as broad and persistent as the feature requires

A companion app usually does not need location permission permanently just to support conversation, general personalization or ordinary reminders. Persistent background access is a separate, broader choice that should correspond to a clearly named feature that keeps working while the app is not visible. Start at the bottom of a necessity ladder: no location or manual entry; one-time or approximate access; access while the feature is in use; and only then background or “Always.” Move upward only when the previous level cannot deliver the visible result. Record precision, duration, recipient and off-switch, then downgrade the permission and observe exactly which feature changes.

August 27, 20269 min readHome, Safety, Pets & Sustainable LivingBy Metlivi Editorial Team
Section 1

Name the feature before opening settings

Write one concrete result that allegedly requires location: insert a local time or place once, attach a location you deliberately choose, continue a user-started route, or trigger another documented function. Do not accept “better experience,” “personalization” or “app functionality” as a complete purpose. Note when the feature starts, when it should stop, whether the app must be visible, and what the user sees as a result. A normal chat does not become location-dependent merely because local suggestions could be added. If the provider cannot connect the permission to a distinct control and observable output, keep the feature at “need not established” while you look for a narrower route.

Section 2

Climb a four-level necessity ladder

Test the feature at four levels, starting with the least access. Level one uses no device location: manual city, time zone, selected place or no geographic input. Level two uses a single request or approximate location. Level three allows access only while the app or feature is visible. Level four permits background access after the app is no longer visible. Android's guidance says to verify that background access is necessary and notes that approximate foreground choice also affects background accuracy. Apple's controls distinguish options such as Allow Once, While Using and Always, with Precise Location separately available. The labels vary, but the decision remains purpose, precision and duration.

Section 3

Require a visible background result

Background access has a stronger case only when the named function must continue after the user leaves the screen and produces a result they intentionally enabled. Google Play's current guidance ties background location to core functionality, significant user benefit, reasonable expectation and minimum scope. That store policy is a useful evaluation lens, not a universal legal conclusion for every device or region. Ask what stops if access changes to While Using, how the ongoing operation is indicated, when it terminates, and whether the user can pause it without closing the whole account. If the only difference is analytics, advertising, broad content tailoring or convenience, prefer a narrower level.

Section 4

Separate accuracy from persistence

Precise location and long duration answer different questions. A feature might need a rough region for local formatting but not an exact position; another might need a precise point once but not continuous access. Record two fields instead of one: smallest useful accuracy and shortest useful duration. Android recommends lower-fidelity alternatives such as coarse location and transactional mechanisms when they meet the use case. On supported Apple systems, Precise Location can be adjusted separately from the access schedule. Test approximate mode before granting exact coordinates. Do not infer that “Always” means continuous sampling every second, or that “While Using” means no background operation under every platform state; verify the app's documented behavior and indicators.

Section 5

Inspect sharing, storage and third-party paths

System permission only controls whether the app may obtain location from the device under the selected conditions. It does not explain what happens after collection. Read the current privacy information for the location category, purpose, precision, retention, deletion controls and recipients. Check whether advertising, analytics, maps, crash reporting or other software components receive a value, and whether a location is saved in chat history, a profile, an attachment or an export. Distinguish live device access from location already written into a message or file. Turning off permission blocks a future route; it does not necessarily remove stored coordinates, shared copies, photo metadata or a recipient's saved content.

Section 6

Perform a downgrade and closed-app test

Use neutral test data and note the initial setting. Change Always or background access to While Using, approximate or denied, depending on the platform. Reopen the app and test only the named feature. Then close or background it for a bounded period and observe system location indicators, notifications, visible feature output and battery settings without assuming that any single signal proves collection. Record pass, graceful reduction, blocked feature or unexplained access. Restore broader access only if the feature's documented, chosen result fails and the extra scope is proportionate. Repeat after an app or operating-system update, because prompts, labels, background rules and implementation can change.

Section 7

Close the decision with an expiry condition

A permission decision should have an end. Keep background access tied to the feature switch that justified it, and set a review trigger such as the route ending, a trip finishing, a device change or the feature no longer being used. Remove the permission when the purpose ends, then check that the account, chat and export contain only what you intended to retain. Keep a short receipt with feature, chosen level, precision, start, stop, recipients, downgrade result and next review. The conclusion may be “not needed,” “needed while using,” “background needed for this enabled feature,” or “unknown pending documentation.” It should not be “the whole app needs location forever.”

Related questions

Common questions

Does a companion app need location for ordinary chat?

Usually not. Ask which named feature fails without it and test a manual or while-using alternative.

Is precise location the same as background access?

No. Accuracy and duration are separate controls and should each be minimized.

Will revoking location delete saved places?

Not necessarily. Device permission limits future access; saved messages, metadata and shared copies need their own controls.

Related reading

Keep exploring this topic