The Universal Contact Book
Windows 10 integrates a centralized “People” app that acts as a master address book for your operating system, syncing contacts from your Microsoft, Google, or Exchange accounts. To allow other applications (like Mail, Calendar, or third-party messaging clients) to utilize this address book, Windows provides a master privacy toggle: “Let apps access my contacts.” When this setting is enabled, you give the operating system permission to act as a broker, allowing software downloaded from the Microsoft Store to request access to your entire contact list.
While this is essential if you actively use the built-in Windows Mail app or Skype, it is a significant privacy risk if you rely primarily on web-based email (like Gmail in your browser) or standalone desktop applications that manage their own contacts independently. Leaving this global gateway open means a malicious or over-reaching app from the Store could theoretically harvest the names, email addresses, and phone numbers of everyone you know. If you do not use native Windows communication apps, you should lock down your digital address book completely.
How to Revoke Global Contact Access
You can instantly block all applications from reading your address book via the Privacy settings.
- Click the Start button and select the Settings gear icon (or press
Win + I). - Click on the Privacy category.
- Look at the left-hand sidebar, scroll down to the “App permissions” section, and click on Contacts.
- In the right-hand pane, locate the master toggle switch positioned directly beneath the text Let apps access my contacts.
- Click the toggle switch to turn it Off.
Once disabled, Windows will sever the connection between your system address book and all installed applications. Apps will no longer be able to auto-complete names or pull phone numbers from your synced accounts.