Limited photo access on iPhone: what apps can really see
Most apps that only need one photo don’t need access to your library at all.
In short
An app with full access can read every photo and video in your library. With limited access, it sees only the items you selected. Apps that use Apple’s system photo picker need no library permission at all: they receive only the photos you pick. You can change any app’s access in Settings › Privacy & Security › Photos.
Key takeaways
- Full access covers the whole library, including photos you take later.
- Limited access is a selection of photos you choose and can change.
- The system picker shares only what you tap, with no permission needed.
Three ways an app can get your photos
- Full access: the app can read your entire photo library, whenever it runs, including everything you add afterwards.
- Limited access: available since iOS 14, it lets you pick specific photos and videos. The app can read those items and nothing else.
- The system photo picker: Apple’s own picker runs in a separate process, outside the app. The app receives only the photos you tap, and it doesn’t need any permission to your library.
The third option is the least visible and the most private. Since iOS 17, apps can even embed the picker so it looks like part of their own screen, but the photos are still shown by the system and shared only when you select them.
What full access really means
Full access is a standing permission, not a one-time choice. The app doesn’t have to wait for you to pick a picture: it can read the library whenever it is running, and every new photo joins what it can see. Photos also carry metadata such as the date and, if location was on when you took them, where they were taken.
Apple has made this harder to grant by accident. Since iOS 17, the request for full access shows how many photos would be shared and a sample of them, and iOS periodically reminds you which apps still have full access.
Change an app’s photo access
- Open Settings › Privacy & Security › Photos.
- Tap the app. Only apps that have asked for access appear in this list.
- Choose the level you want. With limited access, you can change which photos are included.
Most apps keep working with less. An app that only needs to save pictures can ask for add-only access, which lets it add photos to your library without reading the ones already there.
A simple rule of thumb
- Give full access only to apps whose job really is the whole library, such as a backup service you trust.
- Use limited access for apps that need a few photos from time to time.
- Prefer apps that use the system picker: they never need to ask.
- Review the list now and then, and check App Privacy Report to see when each app actually used its access.
Where a vault fits
Photo permissions decide which apps can read your library. They do nothing about who can open the Photos app itself on your unlocked iPhone. Photos you move into a vault such as Latent are encrypted with their own keys and, once you delete the originals and empty Recently Deleted, they are no longer in the library for any app — full access or not — to read.