facebook-pixel

How to Block Trackers on Your Phone: Complete 2026 Guide

L
Lunyb Security Team
··9 min read

Your smartphone is the most tracked device you own. From the moment you unlock it in the morning until you set it down at night, dozens of apps, websites, and background services are quietly collecting data about where you go, what you tap, and even how long you hover over a post. The good news: you can take back a surprising amount of control in under an hour. This guide walks you through exactly how to block trackers on your phone, whether you use iOS or Android, using built-in settings, private DNS, and a few trusted tools.

What Are Phone Trackers, Really?

Phone trackers are small pieces of code — usually software development kits (SDKs), cookies, pixels, or device identifiers — that collect information about your activity and send it back to advertisers, analytics companies, or data brokers. They are the invisible plumbing of the mobile ad economy.

On a typical Android or iOS device, trackers show up in four main places:

  1. Inside apps: embedded SDKs from companies like Meta, Google, TikTok, and dozens of smaller ad networks.
  2. In mobile browsers: third-party cookies, fingerprinting scripts, and tracking pixels.
  3. At the operating system level: advertising IDs (IDFA on iOS, AAID on Android) that tie your activity together across apps.
  4. In notifications, emails, and links: tracking parameters appended to URLs you tap.

Blocking all of them completely is nearly impossible, but reducing 80–90% of the data leakage is very realistic.

Step 1: Reset and Limit Your Advertising ID

Your advertising ID is the single most valuable identifier for ad networks. It links your behavior across unrelated apps into one profile. Disabling it is the highest-impact change you can make in two minutes.

On iPhone (iOS 17 and later)

  1. Open Settings → Privacy & Security → Tracking.
  2. Toggle off Allow Apps to Request to Track.
  3. Go back to Privacy & Security → Apple Advertising and turn off Personalized Ads.

This forces every app to receive a blank identifier, which breaks most cross-app profiling.

On Android (Android 13 and later)

  1. Open Settings → Security & Privacy → Privacy → Ads.
  2. Tap Delete advertising ID (not just "reset").
  3. Confirm. Your device will now send a string of zeros to any app requesting it.

If your Android skin hides this menu (some Samsung, Xiaomi, and OnePlus builds do), search "advertising" in the Settings search bar.

Step 2: Audit and Revoke App Permissions

Most trackers only work because you've given apps permission to collect the raw data they need: location, contacts, microphone, and background activity.

The permission audit checklist

  • Location: Set to "While Using the App" or "Ask Next Time" for everything except maps and ride-hailing.
  • Microphone & Camera: Revoke for any app that doesn't obviously need them.
  • Contacts: Revoke aggressively. Social and messaging apps often upload your entire address book.
  • Background activity / Background App Refresh: Turn off for apps you don't actively use.
  • Bluetooth & Nearby Devices: Trackers increasingly use Bluetooth beacons to log your real-world location.

On iOS, check Settings → Privacy & Security and go through each category. On Android, use Settings → Security & Privacy → Permission Manager.

Step 3: Use Encrypted, Tracker-Blocking Private DNS

DNS is how your phone looks up website addresses. By default, those lookups go to your carrier or Wi-Fi provider in plain text — meaning anyone in the middle can see every domain you visit. Switching to an encrypted DNS resolver that also filters known tracker domains blocks a huge portion of trackers before they ever load.

Recommended private DNS providers

Provider DNS-over-TLS hostname Blocks trackers? Blocks malware?
NextDNSyour-id.dns.nextdns.ioYes (customizable)Yes
Cloudflare 1.1.1.1 for Familiessecurity.cloudflare-dns.comPartialYes
AdGuard DNSdns.adguard-dns.comYesYes
Quad9dns.quad9.netPartialYes

How to set private DNS on Android

  1. Open Settings → Network & Internet → Private DNS (sometimes under "More connection settings").
  2. Choose Private DNS provider hostname.
  3. Enter a hostname from the table above (e.g., dns.adguard-dns.com).
  4. Save. It applies system-wide, including inside apps.

How to set encrypted DNS on iPhone

iOS doesn't have a built-in Private DNS field, but you can install a free configuration profile from NextDNS, AdGuard, or Cloudflare. Once installed, go to Settings → General → VPN, DNS & Device Management → DNS and select the profile.

Step 4: Switch to a Privacy-Respecting Mobile Browser

The default browser on most phones leaks data constantly. Switching browsers is one of the easiest wins.

  • Brave: Blocks ads, trackers, and fingerprinting by default on both iOS and Android.
  • Firefox Focus: Erases your session with one tap; aggressive tracker blocking out of the box.
  • Safari with Lockdown Mode: On iOS, enable Settings → Safari → Prevent Cross-Site Tracking and Hide IP Address → From Trackers.
  • DuckDuckGo Browser: Built-in tracker blocker and email protection for forwarding addresses.

Whichever browser you choose, turn on HTTPS-only mode and disable third-party cookies.

Step 5: Install a System-Wide Content Blocker

A content blocker extends tracker filtering into every app, not just your browser.

  • AdGuard (Android and iOS): Filters trackers at the DNS or local level. The iOS version works as a Safari content blocker; the Android version can run as a local filtering service.
  • Lockdown Privacy (iOS): Open-source, blocks trackers from inside apps.
  • Blokada (Android): Free and open source, blocks ads and trackers at the device level.

Combine one of these with private DNS for layered protection: DNS catches tracker domains at the network level, while the local blocker catches anything that slips through.

Step 6: Strip Tracking Parameters from Links

Ever notice those long tails on URLs — ?utm_source=…&fbclid=…&gclid=…? Those are tracking parameters that identify exactly who clicked, from where, on which campaign.

You can strip them automatically:

  • iOS 17+: Safari and Mail automatically remove known tracking parameters when you enable Advanced Tracking and Fingerprinting Protection under Safari settings.
  • Android: Use apps like UntrackMe or LinkCleaner to clean links before opening or sharing them.
  • When sharing links yourself: use a privacy-respecting URL shortener. Services like Lunyb let you share clean, short links without appending third-party tracking parameters or feeding click data into ad networks. If you want more detail on how Lunyb handles privacy, see our honest review of Lunyb.

Step 7: Lock Down Your Google or Apple Account

Even perfect on-device settings leak data if your cloud account is wide open.

Google account

  1. Visit myactivity.google.com.
  2. Turn off Web & App Activity, Location History, and YouTube History, or set them to auto-delete every 3 months.
  3. Under Data & privacy → Ad settings, turn off personalized ads.

Apple ID

  1. Go to Settings → [your name] → Sign-In & Security.
  2. Enable Advanced Data Protection for end-to-end encrypted iCloud backups.
  3. Under Privacy & Security → Analytics & Improvements, disable sharing with Apple and app developers.

Step 8: Review Your Most-Used Apps Individually

A handful of apps are responsible for the majority of tracking on most phones. Spend ten minutes on the heaviest offenders:

  • Social apps (Instagram, TikTok, Facebook, X): Disable off-app activity tracking in each app's privacy menu.
  • Shopping apps (Amazon, Shein, Temu): Revoke background location and ad personalization.
  • Weather and flashlight apps: These are notorious data brokers. Replace them with open-source alternatives or your phone's built-in version.
  • Keyboards: Third-party keyboards see everything you type. Stick with the system keyboard unless you have a strong reason not to.

How Much Tracking Can You Actually Block?

Here's a realistic breakdown of what each layer blocks:

Protection layer Difficulty Estimated trackers blocked
Disable advertising IDVery easyCuts cross-app profiling by ~70%
Permission auditEasyBlocks sensor and location leakage
Private DNS filteringEasyBlocks 40–60% of in-app tracker calls
Privacy browserEasyBlocks 80–95% of web tracking
Local content blockerMediumAdds another 10–20% on top of DNS
Link parameter strippingEasyBreaks campaign-level attribution

Stacked together, these measures can reduce the data flowing out of your phone by well over 90% — without sacrificing the apps you actually use.

Common Mistakes to Avoid

  • Installing too many blockers at once. Running three competing content filters will break apps and slow down your phone. Pick one DNS + one local blocker, maximum.
  • Ignoring the browser. Your browser is probably your single biggest tracker surface. Fix it first.
  • Trusting "free" privacy apps from unknown developers. If an app with no clear business model is handling your DNS traffic, it may be the product being sold.
  • Forgetting to revisit settings after OS updates. Major iOS and Android updates sometimes reset privacy toggles. Audit once every few months.

Frequently Asked Questions

Does airplane mode block trackers?

Airplane mode blocks all network activity, so no tracker can phone home while it's on. But as soon as you reconnect, most apps batch-upload the data they collected offline. Airplane mode is a pause button, not a solution.

Can I block trackers without installing any apps?

Yes. Resetting your advertising ID, auditing permissions, enabling private DNS, and using your browser's built-in protections (Safari on iOS, Brave or Firefox on Android) will block the majority of trackers with zero additional apps.

Do tracker blockers slow down my phone?

A properly configured DNS-level blocker usually makes browsing faster because pages load fewer scripts and images. Heavy local filtering apps can add a small amount of battery drain, typically 2–5%.

Will blocking trackers break my apps?

Occasionally. Some apps refuse to load content if their analytics calls fail, and some login flows use tracker domains. If an app breaks, temporarily disable your blocker, note which domain was required, and whitelist it rather than turning off protection entirely.

Is it legal to block trackers?

Absolutely. You own your device and you choose what data leaves it. Blocking trackers is no different from closing your blinds at night — it's a basic exercise of your privacy rights, and in jurisdictions like the EU and UK, platforms are legally required to honor opt-outs anyway.

Final Thoughts

Blocking trackers on your phone isn't a single switch — it's a short checklist you run through once, then revisit every few months. Reset your advertising ID, audit permissions, point your device at a filtering DNS resolver, switch to a privacy-first browser, and clean up the links you share. Most people can get through all seven steps in under an hour and immediately cut the volume of personal data leaving their phone by an order of magnitude.

Privacy on mobile is no longer the default, but it's still very much within reach — you just have to turn the dials yourself.

Protect your links with Lunyb

Create secure, trackable short links and QR codes in seconds.

Get Started Free

Related Articles