I’d like to prevent some work apps from determining location and have blocked that permission for them. To date I’ve used these work apps only when my GOS devices are on LAN via ethernet cable (and with airplane mode on and wifi off). I do this to prevent the apps access to nearby wifi names as I assume they will use the Apple location database or Google analogue for location determination. These work apps demand network permission to function (full stop).
Running such apps as LAN-only, in airplane mode, with wifi off, is really the only way to prevent them determining location, correct? Am I thinking this through correctly?
Otherwise, I have a segmented network and could place a device running work apps on a work vlan.
What can “nearby devices” permission reveal to apps that want your location?
I looked with App Manager just now and some of the work apps have a permission enabled called ACCESS_WIFI_STATE that I don’t remember enabling.
These two pages (to my novice view) seem to suggest that nearby SSID names might be obtained via this permission as well but location permission must also enabled first (?).
Sorry if I am misunderstanding.
Anyway, these apps that have ACCESS_WIFI_STATE enabled are not also demanding location permission so this would not be a factor, correct?
If devices need access to nearby Wi-Fi for determining user location, then they need the location permission. Apps accessing the nearby devices permission instead must specify that they don’t access the users location.
That just means they can know when Wi-Fi is turned on and off, etc. It doesn’t need user confirmation.