No single AI app can be named "the best" for an iPhone on the evidence available, but any AI app can be checked after installation. iOS 15.2 and later include an App Privacy Report that logs, for the past seven days, when an app used the camera, microphone, location, photos, or contacts, and which web domains it contacted. Read together with the app's App Store privacy label, the report shows whether an assistant is doing more with a phone's data than its description suggests.
Key takeaways
- App Privacy Report is off by default and begins recording only after it is turned on in Settings under Privacy & Security.
- It covers four things: data and sensor access, app network activity, website network activity, and most contacted domains, each over the past seven days.
- Apple states that the report data is encrypted and stored only on the device, and that turning the feature off clears it.
- App Store privacy labels are filled in by developers, who are responsible for keeping them accurate.
- A chat or photo app that sends typed text, images, or audio to a server is collecting "User Content" under Apple's own label categories.
Turning on the report
Apple's support article on App Privacy Report gives the path: Settings, Privacy & Security, App Privacy Report, then Turn on App Privacy Report. The feature requires iOS 15.2 or iPadOS 15.2 or later. Because logging begins only after activation, a newly enabled report is empty at first, and a few days of normal use are needed before patterns show.
The article says private browsing sessions in browser apps are excluded. It also says the stored data is encrypted, remains on the device, and is erased when the feature is turned off. The reporting window is seven days, so older activity does not appear.
What each section shows
Data & Sensor Access lists how often and when apps used items such as Location, Photos, Camera, Microphone, and Contacts. App Network Activity lists the domains an app contacted, directly or through content shown inside it. Website Network Activity lists domains contacted by sites opened inside apps. Most Contacted Domains ranks the domains that apps reach most often across the phone.
The report records domain names, not the content of what was sent. A domain that looks unfamiliar is a prompt for questions, not proof of a problem, since apps often rely on analytics, advertising, or hosting companies. Checking the app's privacy policy for those company names is the next step.
Reading the privacy label alongside the report
Apple's App Privacy Details page tells developers to declare what their app and any third-party code collect. Apple defines collection as transmitting data off the device so that the developer or partners can access it for longer than needed to serve the request in real time. Data types include User Content (emails or messages, photos or videos, audio data), Location, Contact Info, Identifiers, Usage Data, and Diagnostics.
Apple also defines tracking: linking data from an app about a user or device with third-party data for targeted advertising or measurement, or sharing it with a data broker. The page puts the duty of accuracy on the developer, and it does not say that Apple verifies each answer. A mismatch between a label and the report, such as an app declaring no location use but showing repeated location access, is a reason to read the policy or contact the developer.
A comparison checklist for AI apps
| Check | Where to look | What a concern looks like |
|---|---|---|
| Does the app need the microphone, camera, or photos? | Data & Sensor Access | Access with no matching feature, or access while the app is not in use |
| Who receives the data? | App Network Activity | Many unrelated domains for a simple tool |
| Is typed text or audio sent off the phone? | App Store label, User Content | Collected and linked to identity, with no clear purpose |
| Is the label current? | Developer's update history | New features added without a label change |
| Can access be reversed? | Settings, Privacy & Security | The app stops working without permissions it should not need |
This table is an orientation aid, not a rating of any product. It does not replace the privacy policy, and it does not cover what an app does with data once it reaches a server.
Where regulation fits
Platform tools check technical behavior, while laws govern what a company may do with the data it receives. In Canada, that is a matter for federal and provincial privacy law, and in the United States it varies by state and by sector. Neither the report nor the label states whether a particular company complies with those laws. Questions about legal duties belong with the privacy regulator or a qualified professional.
FAQ
Does App Privacy Report block anything?
No. It records activity and shows it to the owner of the phone. Access is changed separately by revoking an app's permission in Settings.
Can the report show what an AI app sent?
No. It lists domains contacted and sensors accessed, not message text or image content.
Is the App Store label the same as the report?
No. The label is the developer's own declaration before download. The report is the phone's own record of observed behavior after the app is installed.
Does the report work on older iPhones?
Apple lists iOS 15.2 or later as the requirement, so a phone that cannot run that version does not offer it.
Related reading
- Choosing an AI app for iPhone
- What counts as a top AI app
- AI in everyday routines
- The Character AI chat app
More in AI Tools and Industry.
Last verified: October 2026
Sources
- About App Privacy Report, Apple Support, 2026
- App Privacy Details on the App Store, Apple Developer, 2026