iOS 27 & Android 17: The Privacy Features Reshaping Mobile in 2026.

Both platforms used their 2026 releases to double down on the same idea: the app should know as little about the user as possible, and the OS should enforce it.

The tone has changed as much as the technical surface. Where the 2019–2022 era framed privacy features as an option users could opt into, the 2026 releases treat privacy as the default and require apps to justify every escalation. The nudge, the review prompt, the one-shot picker — these are now first-class OS primitives.

The iOS 27 shortlist

• Per-app network scoping — an app can be granted only the domains it needs, not the whole internet
• Signed background telemetry: any analytics event leaving the device must declare its purpose to the OS
• Private Cloud Compute expanded to third-party model providers with attestation
• Contact & photo access defaults collapsed to one-shot picker in more contexts
• Clipboard reads surface a visible OS indicator on every access

The Android 17 shortlist

• Runtime permission review that nudges users to revoke unused grants every 30 days
• Gemini Nano available to all apps as an on-device inference API
• Isolated storage buckets per feature — apps no longer see each other's caches
• Play Integrity attestation now covers install source AND runtime tampering
• Network permission tiers echo iOS's per-app domain scoping

What to change in your app this quarter

Audit your third-party SDKs. Any that phone home to undeclared endpoints will start failing silently on iOS 27. On Android, expect a wave of "is this app still using X permission?" prompts — build for the case where the user says no.

The under-covered story

Both OSes now expose on-device inference as a first-class API. That means the smallest indie team can ship a feature that would have required a GPU bill and a legal review two years ago. The privacy story and the AI story are converging into the same story, and 2026 is the year that becomes obvious.