Core question
How do you decide whether to grant an app permission?
Answer first
Start with the full cost, key benefit and boundary before deciding.
Grant only permissions required for the core function; deny or use once for the rest.
Primary cost
Privacy exposure
Primary benefit
Working features
Risk level
High
Evidence note
A
Supported by laws, standards, official statistics or authoritative guidance.
Sources, jurisdiction and timeliness
- 中华人民共和国个人信息保护法（国家法律法规数据库） 中国官方 · 全国人大常委会 · 中国 · 2021-08-20 · 2026-09-29
- 中华人民共和国数据安全法（国家法律法规数据库） 中国官方 · 全国人大常委会 · 中国 · 2021-06-10 · 2026-09-29
- 中华人民共和国网络安全法（2025 年修订）（国家法律法规数据库） 中国官方 · 全国人大常委会 · 中国 · 2025-10-28 · 2026-09-29
- Jurisdiction
- 中国
- Effective date
- Not registered
- Last reviewed
- 2026-09-29
Registered limitations
- The Personal Information Protection Law, Data Security Law and Cybersecurity Law support checks on minimum necessity, notice, consent and security duties; detailed app-permission categories still follow regulator rules and the platform's privacy policy.
- Whether contacts, location or another sensitive permission is necessary depends on the core function and less intrusive alternatives.
Next action
Do these first, then decide.
Check the registered statutes, jurisdiction and limitations below, then follow the action checklist.
- Check the registered statutes, jurisdiction and limitations below, then follow the action checklist.
- Source jurisdiction: China
- The Personal Information Protection Law, Data Security Law and Cybersecurity Law support checks on minimum necessity, notice, consent and security duties; detailed app-permission categories still follow regulator rules and the platform's privacy policy.
This decision card provides general decision information and is not legal, medical, financial, tax or other professional advice.