Deny App Access to Contacts in Windows 11 and 10 (and Where Your Contacts Are)

To deny app access to contacts in Windows 11, open Settings, select Privacy & security, and under App permissions select Contacts. Turn off Let apps access your contacts to block every app at once, or leave it on and turn off individual apps in the list below it. Turning off Contacts access at the top blocks contacts for everyone who uses the PC. In Windows 10, the same switches are in Settings, Privacy, Contacts. These switches control apps from the Microsoft Store; traditional desktop programs that read your email account directly are not covered by them. Your contacts themselves usually live in your email account, such as Outlook.com or Gmail, and you see them in Outlook, not in a separate Windows contacts app.

Ethan's daughter installed a free photo-sharing app from the Microsoft Store, and on first launch it asked to access her contacts. She said yes without thinking, as most people do, and that evening asked her father whether the app could now see everyone in her address book. Ethan called Jake, who opened Settings, Privacy & security, Contacts, and showed them the list: the photo app was there with its switch on, alongside two other apps nobody remembered allowing. Jake turned all three off, explained what the switches did and did not cover, and then showed Ethan where the family's contacts actually lived, which turned out to be the bigger surprise: not on the PC at all, but in their Microsoft and Google accounts, synced down whenever they opened Outlook. This page covers both halves: how to allow or deny contact access for apps in Windows 11 and 10, including Group Policy and the registry, and where your contacts are stored, how to view and export them, and what to do when they go missing.

What contact access means in Windows

Windows keeps a permission called Contacts that controls whether apps can read the contacts available to your Windows account. When an app asks for it and you allow it, the app can read names, email addresses, phone numbers and other details of the people in the contact lists Windows knows about, typically the contacts from the email accounts you have added to Windows. Depending on the app, it may also be able to add or change contacts.

Apps ask for contacts for understandable reasons. An email app needs them to suggest addresses as you type. A messaging or calling app uses them to show names instead of numbers. A photo or social app may want them to suggest friends to share with or invite. A calendar app uses them to fill in meeting attendees. The permission is useful when the app genuinely needs it and wasteful, or worse, when it does not.

Your contacts are not just your own data. They are other people's names, numbers and addresses, which they shared with you, not with every app you install. That is the main reason to be careful with this permission: an app that uploads your address book to its servers shares information about people who never agreed to it. Some apps do this to build "people you may know" features or to send invitations, and the terms often allow it.

Windows asks for your consent the first time an app requests contacts, with a prompt such as "Let this app access your contacts?" Your answer is remembered, and it appears afterward as a switch in Settings, which you can change at any time. Changing your mind later is the whole point of this page: most people, like Ethan's daughter, answer the prompt in a hurry and never look again.

It also helps to know what the permission does not do. It does not delete your contacts or hide them from you; it only decides which apps can read them through Windows. It does not stop you from typing an email address in an app by hand. And it does not reach into your phone, your email provider's website or the cloud; those have their own permissions, covered further down.

The permission prompt: what Yes and No really mean

The first time a Store app wants your contacts, Windows shows a prompt asking whether to let it access them, with Yes and No buttons. The prompt comes from Windows, not from the app, which is why it looks the same for every app. Whatever you choose becomes that app's switch on the Contacts page in Settings, and Windows does not ask again; from then on, Settings is the only place to change your mind.

Selecting No does not break most apps. A well-built app carries on without contacts and only mentions the permission when you use a feature that needs it, such as inviting friends. If an app refuses to work at all without contacts, and contacts have nothing to do with its purpose, that tells you something about the app.

Some apps show their own screen before the Windows prompt, explaining why they want contacts and asking you to continue. That screen is the app's request; the decision is still the Windows prompt that follows. If you are unsure, select No. Allowing access later takes a few seconds in Settings, while taking back contacts that were already uploaded is much harder.

Uninstalling an app removes its entry from the list, and if you install it again, it asks again as if it were new. That gives you a clean second chance if you allowed an app in a hurry and want to start over, though anything it uploaded before stays wherever it was sent. Ethan's daughter now selects No by default and allows access only when an app's feature actually asks for it, which so far has been never.

Where your contacts live in Windows 11 and 10

Searches like "where are my contacts in Windows 11" are common because Windows no longer has an obvious contacts app. In Windows 11, contacts almost always live in the email accounts you use, such as a Microsoft account (Outlook.com, Hotmail, Live), a work or school Microsoft 365 account, or a Google account, and Windows shows them through apps rather than storing its own address book.

Outlook for Windows. The new Outlook, which replaced the old Mail and Calendar apps when Microsoft retired them at the end of 2024, is where most Windows 11 users see their contacts. Open Outlook and select the People icon in the left bar to see contacts from every account added to it. These contacts are stored in each account's cloud service and synced to the app, so the same list appears on your phone and on the web.

Your Microsoft account on the web. If you sign in to Windows with a Microsoft account and use Outlook.com, your contacts are at outlook.live.com/people. This is the master copy for those contacts. Adding, editing or deleting a contact here changes it everywhere the account syncs, including Outlook on your PC and phone.

Classic Outlook. The older Outlook from Microsoft Office stores contacts inside its data files. For Microsoft 365, Exchange, Outlook.com and most IMAP accounts, that is an offline cache with the extension .ost, in %LOCALAPPDATA%\Microsoft\Outlook, with the real copy on the server. For POP accounts and archives, contacts are in a .pst file, usually in Documents\Outlook Files, and that file is the only copy, so it is worth backing up.

The Windows Contacts folder. Your user folder, at C:\Users\yourname\Contacts, still exists on many PCs. It belongs to an old Windows feature called Windows Contacts that stores each person as a .contact file. Very few apps use it today, and on most PCs the folder is empty or holds a single file for you, but if you used Windows Contacts or Windows Live Mail years ago, your old address book may still be there.

Phone Link. If you link your Android phone or iPhone to Windows with Phone Link, the app shows your phone's contacts for calls and messages. Those contacts stay on the phone and its account; Phone Link displays them while connected rather than becoming a separate copy you manage on the PC.

Windows 10's People app. Windows 10 has a People app that shows contacts from accounts added to Windows, and older versions pinned People to the taskbar. It reads the same account contacts as Mail did. With Windows 10 now past its end of support for most users, and Mail retired, most people now manage those contacts in Outlook or on the web instead.

The table sums up where to look.

For Ethan's family, the answer was the first and third rows: Ethan's contacts were in his Microsoft account, and his daughter's in her Google account, both visible in Outlook. That is also why denying app access did nothing to the contacts themselves; they were safely in the cloud the whole time.

Deny or allow contact access in Windows 11

Windows 11 groups every app permission under Privacy & security. The contacts page has three levels of control: one for the whole device, one for all apps of your account, and one per app.

1. Open Settings with Windows + I.
2. Select Privacy & security in the left pane.
3. Scroll down to App permissions and select Contacts.
4. To block one app, find it in the list and turn its switch off.
5. To block every app for your account, turn off Let apps access your contacts. The per-app list is grayed out while this is off.
6. To block contacts for everyone who uses the PC, turn off Contacts access at the top. This needs an administrator account.

The change takes effect immediately. An app that is open may keep any contacts it had already loaded until you close it, so close and reopen apps you have just blocked. The next time a blocked app tries to read contacts, it gets nothing, and well-built apps show a message suggesting you allow access in Settings if a feature needs it.

The list only shows apps that have asked for contacts. If an app is not there, it either has never asked or is a desktop program that does not use the Windows permission system. The order of the list is alphabetical, and it includes Microsoft's own apps, such as Outlook or Phone Link, which need contacts for their basic features. Turning those off is allowed but will break things like address suggestions in Outlook.

To allow an app you blocked earlier, return to the same page and turn its switch on. If the app is grayed out, the master switch above it is off, or a policy set by an administrator is in control, which Settings indicates with a message that some settings are managed by your organization.

Jake's habit is to look at this page with a simple question for each app: does this app need to know who my friends are to do its job? For an email or calling app, yes. For a photo editor, a game or a note-taking app, almost never. That one question cleaned up Ethan's daughter's list in under a minute.

The three switches explained

The three switches on the Contacts page are layered, and knowing how they interact avoids confusion when an app still will not work, or still seems to have access.

An app can read contacts only when all three layers allow it. If the device switch is off, nothing below it matters, which is why administrators on shared PCs use it. If the device switch is on but your account switch is off, all your apps are blocked, while other users on the same PC make their own choices. Per-app switches give fine control within your account.

Group Policy and the registry policy, covered below, sit above all three. When a policy forces a setting, the switches in Settings are locked to match it and cannot be changed by users, including administrators, until the policy is removed.

Deny or allow contact access in Windows 10

Windows 10 has the same three layers, in a slightly different layout.

1. Open Settings and select Privacy.
2. In the left pane, under App permissions, select Contacts.
3. To block contacts for every user, select Change under Allow access to contacts on this device and turn it off. This needs an administrator.
4. To block every app in your account, turn off Allow apps to access your contacts.
5. To block individual apps, turn them off under Choose which apps can access your contacts.

In Windows 10, the People, Mail and Calendar apps typically appear in this list, as do Cortana on older versions and Skype. Blocking People removes the point of the app, since it exists only to show contacts. Windows 10 reached the end of mainstream support in October 2025, though enrolled PCs get Extended Security Updates for a while longer; the contacts settings are the same either way.

The related permissions: email, calendar, call history and more

Contacts is one of a family of personal information permissions, and an app that wants your contacts often asks for the others too. They sit right next to Contacts in Privacy & security, and they work the same way, with the same three layers.

When reviewing contacts, review these at the same time. A game or utility with access to your email or messages is far more concerning than one with access to contacts. Our guide to Windows privacy settings walks through every permission page, including location, camera and microphone, in the same way.

The catch: Store apps versus desktop programs

The contacts switches control apps that use the modern Windows permission system, which in practice means apps from the Microsoft Store and some newer apps that are packaged the same way. Traditional desktop programs, the kind you install from a website with a setup file, mostly do not ask Windows for contacts at all, so the switches do not affect them.

Instead, a desktop program reaches contacts by other routes: classic Outlook keeps its own contacts in its data file; a desktop email program like Thunderbird downloads contacts directly from your email account; and a program that has your account password or a sign-in token can read contacts from the provider's servers. Windows does not stand in the middle of any of those, so there is no switch for them.

Unlike camera, microphone and location, which have a separate Let desktop apps access switch in Windows 11, contacts has no desktop-app switch. For desktop programs, the controls are elsewhere:

• At the account level. If a program signed in to your Microsoft or Google account, it appears in that account's list of connected apps. Removing it there cuts off its access to contacts and everything else.
• In the program itself. Most email programs have settings for which accounts and folders they sync. Removing an account from the program stops it reading those contacts.
• By uninstalling. A program you do not trust with your address book should not be on the PC at all.

For a Microsoft account, sign in at account.microsoft.com, open Privacy, and look for the apps and services that have access to your account, where you can remove any you no longer use. For a Google account, the equivalent is the third-party connections page under Security in your Google Account. Jake checks these once a year and usually finds a few long-forgotten apps to remove.

Contacts in Phone Link: what it shows and how to stop it

Phone Link connects a phone to Windows so you can make calls, read and send texts and see notifications on the PC. To show names for calls and messages, it uses your phone's contacts, and this is the most common way contacts appear on a Windows 11 PC today.

With an Android phone, Phone Link works with the Link to Windows app on the phone, which asks for permission to access contacts, messages and calls. If contacts are not showing in Phone Link, that permission is usually the cause: on the phone, open Settings, Apps, Link to Windows, Permissions, and allow Contacts. To stop Phone Link from seeing your contacts, deny that permission on the phone instead.

With an iPhone, Phone Link connects over Bluetooth. Contacts sync only if you allow it: on the iPhone, open Settings, Bluetooth, tap the information button next to your PC, and turn on Sync Contacts, along with Show Notifications for messages. Turning Sync Contacts off stops Phone Link from showing your iPhone contacts. If contacts do not appear on an iPhone, toggling this off and on and reconnecting often fixes it.

On the PC side, Phone Link appears in the Contacts, Call history, Messaging and Phone calls lists in Privacy & security. Turning it off there blocks those features. To remove the connection entirely, open Phone Link settings and remove the device, and remove the PC from Link to Windows on the phone or from the iPhone's Bluetooth list.

Phone Link contacts are a view of your phone's contacts, not a separate list. To add, edit or delete a contact, change it on the phone or in the account it syncs with, and Phone Link reflects the change the next time it syncs. Ethan's daughter preferred texting from the PC, so she kept Phone Link's contact access on; it was the photo app she had wanted gone.

Block contact access for every user with Group Policy

On Windows 11 and 10 Pro, Enterprise and Education, Group Policy can enforce the contacts setting for every user, so nobody can turn it back on in Settings. This is useful on shared, school and office PCs. You need to be signed in as an administrator; our guide to checking whether your account is an administrator shows how to confirm it.

1. Press Windows + R, type gpedit.msc and press Enter.
2. Go to Computer Configuration, Administrative Templates, Windows Components, App Privacy.
3. Double-click Let Windows apps access contacts.
4. Select Enabled.
5. Under Default for all apps, choose Force Deny to block all apps, Force Allow to allow all apps, or User is in control to leave it to each user.
6. Optionally, list specific apps by their package family names in the boxes for apps that should always be allowed or denied, which override the default.
7. Select OK, then sign out and back in, or run gpupdate /force in Command Prompt.

The package family name lists let you, for example, deny contacts to every app except the company's email app. You can find an installed app's package family name with the PowerShell command Get-AppxPackage -Name *partofname* | Select-Object Name, PackageFamilyName, replacing partofname with part of the app's name.

To undo the policy, set it back to Not Configured. The switches in Settings then return to user control with whatever values they had. On managed PCs, the same setting is delivered through Intune or another management tool as the LetAppsAccessContacts privacy setting, and a local Group Policy change will not override it.

Block contact access with the registry (Windows 11 Home)

Windows 11 and 10 Home do not include the Group Policy editor, but the same policy can be set in the registry, and the switches behind Settings are also stored there. Back up the registry or create a restore point before editing, since mistakes elsewhere in the registry can cause problems.

The policy, for every user. In Registry Editor, go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy, creating the AppPrivacy key if it does not exist. Create a DWORD (32-bit) value named LetAppsAccessContacts and set it to 2 for Force Deny, 1 for Force Allow, or 0 for User is in control. Restart the PC. Delete the value to remove the policy.

From an administrator Command Prompt, one line does the same:

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v LetAppsAccessContacts /t REG_DWORD /d 2 /f

The Settings switches themselves. The device-wide switch is stored under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts, and your account's switch under the same path in HKEY_CURRENT_USER, each with a string value named Value set to Allow or Deny. Per-app choices are stored in subkeys below. Editing these is mainly useful in scripts that set up new PCs; for a single PC, Settings is easier and safer.

The difference matters: the ConsentStore values are the same as flipping the switches, so users can change them back in Settings, while the policy value locks the switches. Use the policy when you want the setting enforced, and the ConsentStore values when you want a sensible default that users can still change.

An app still seems to have your contacts after you denied access

Turning off the switch stops future reading through Windows, but it cannot reach back in time. If an app already read your contacts, it may have saved them in its own storage, and if it uploaded them to its servers, they are there regardless of what you do on the PC. Several situations explain an app that "still has" your contacts.

The app copied them earlier. Many apps that offer friend suggestions or invitations upload the address book when you first allow access. Denying access stops new uploads; removing what is already on their servers needs the app's own settings, often a privacy or "synced contacts" option, or a request to the company. Uninstalling the app on the PC does not delete server copies.

It is a desktop program. As covered above, the switches do not cover traditional programs, which reach contacts through your email account. Check the program's account settings or remove its access from your Microsoft or Google account.

It reads contacts through another app. Some apps get contact details through a service you allowed, such as a web sign-in that included contacts in the permissions you accepted. The account's connected apps page shows and removes these.

You typed the information yourself. Addresses you have entered in an app, such as recipients of past messages, are the app's own history, not contacts access. Clear them in the app if needed.

A cached view. An app open while you changed the switch may still display contacts it had loaded. Close it completely and reopen it.

If none of these explain it, sign out of the Windows account and back in, or restart, and check that the switch is still off; in rare cases, a sync of settings between PCs or an older policy can turn it back. Then uninstall the app if you no longer trust it.

How to view, add and export your contacts in Windows 11

Because Windows 11 has no separate contacts app, viewing and managing contacts happens in Outlook or on the web. In Outlook for Windows, select the People icon in the left bar to see your contacts, search them, and open any contact to see details. Select New contact to add one, choosing which account it belongs to if you have several. Edits sync to that account's cloud copy and to your other devices.

On the web, Outlook.com's People page, at outlook.live.com/people, does the same for Microsoft account contacts, and contacts.google.com does it for Google contacts. Both let you merge duplicates, organize contacts into lists or labels, and restore deleted contacts for a period after deletion, which is handy if a sync problem removed some.

To export your contacts as a backup or to move them, open the People page on Outlook.com, use the Manage contacts menu, and choose Export contacts, which saves a CSV file you can open in Excel or import elsewhere. Google Contacts has an Export option that saves a CSV or vCard file. In classic Outlook, File, Open & Export, Import/Export exports contacts to a CSV file. Keeping one export a year is a cheap insurance policy against an account problem.

To import contacts, use the matching Import option on the same page, choosing the CSV or vCard file. If you are moving from an old PC that used Windows Contacts, open the Contacts folder, select the .contact files, and use the folder's Export option, if shown, to create a CSV or vCard file; otherwise, open each contact and copy the details across.

For Ethan, the export was the most useful thing Jake showed him: one click on Outlook.com produced a file of every family contact, which he saved to an external drive. If an account were ever lost, the address book, often the hardest thing to rebuild, would not be.

Contacts missing after a Windows update or a new PC

Contacts that "disappear" in Windows are almost never deleted; they are usually not syncing, or the app showing them changed. Work through these checks before assuming the worst.

Check the account on the web. Sign in to Outlook.com People or Google Contacts in a browser. If your contacts are there, they are safe, and the problem is only the app or sync on the PC.

Check the account in Outlook. If you moved from Mail to the new Outlook, or set up a new PC, the account may not have been added to Outlook yet, or it may need you to sign in again. Open Outlook's settings, Accounts, and make sure each account is there and signed in. A Microsoft account that shows a warning in Settings, Accounts can stop syncing too; our guide to fixing "You need to fix your Microsoft account" covers that.

Check the contacts permission. If you turned off contacts access at the device or account level, apps such as Outlook may show no contacts or fail to suggest addresses. Turn on access for the apps that need it.

Check classic Outlook data files. If you used classic Outlook with a POP account, your contacts were in a .pst file. On a new PC, copy that file from the old PC's Documents\Outlook Files folder and open it in Outlook with File, Open & Export, Open Outlook Data File.

Check the old Contacts folder. Very old address books from Windows Live Mail or Windows Contacts may still be in C:\Users\yourname\Contacts, on the old PC or in a backup.

Check deleted contacts. Both Outlook.com and Google Contacts keep deleted contacts for a while and let you restore them, and Google can restore your contact list to how it was at an earlier time, within its retention window.

When to allow contact access, and when to deny it

Denying everything is tempting, but some apps genuinely need contacts, and blocking them just breaks features you use. A practical rule is to allow access when the app's main job involves communicating with people you know, and deny it otherwise.

Usually worth allowing: your email app, so it can suggest addresses; your calendar app, for inviting people; Phone Link, if you call or text from the PC; and calling or messaging apps you actually use. These apps are built around contacts and are typically from companies you already trust with the same information.

Usually worth denying: games, photo editors, note apps, utilities, shopping apps and social apps that only want to "find friends". If such an app has a feature that needs contacts, it will tell you, and you can allow it then. Free apps from unknown developers deserve particular caution; contacts are valuable data for some business models.

On shared PCs, such as a family computer or a reception desk, consider turning off contacts access for the device and allowing it only in the accounts that need it, or using a policy at work. And remember that every allowed app is one more place your friends' details might end up, which is a decent reason to keep the list short.

Microsoft's own apps also appear in the list. Turning off contacts for Outlook, for example, stops it suggesting addresses as you type. If you do that by accident while cleaning up, the fix is simply to turn its switch back on.

A five-minute privacy audit for contacts and personal data

Jake now does a short audit on every family PC once a year, and it takes about five minutes. The steps are the same for any PC:

1. Open Settings, Privacy & security, Contacts, and turn off every app that does not need contacts for its main job.
2. Do the same on the Calendar, Email, Call history and Messaging pages.
3. Check Camera, Microphone and Location, including the Let desktop apps access sections, and turn off anything unexpected.
4. Sign in to account.microsoft.com and your Google account, and remove connected apps you no longer use.
5. On your phone, review which apps have contacts permission, including Link to Windows or the iPhone's Bluetooth Sync Contacts setting.
6. Export your contacts from Outlook.com or Google Contacts and save the file somewhere safe.
7. Uninstall apps you no longer use. An uninstalled app cannot read anything.

The audit catches apps allowed in a hurry, like the photo app that started this story, and it doubles as a contacts backup. It also reminds everyone in the family how the prompts work, which makes the next "allow access?" question less likely to be answered by reflex.

Contacts on shared and family PCs

Each Windows user account has its own contacts permissions and its own email accounts, so contacts do not mix between family members who each have their own account. Ethan's contacts are not visible to his daughter's apps, and her app permissions do not affect his. This is one of the best reasons to give each person their own account rather than sharing one; our guide to creating a user account covers local, Microsoft and child accounts.

For a child's account, a family-managed Microsoft account adds controls such as app and game limits, which help stop new apps from being installed without a parent's approval, and so stop new contacts requests at the source. For a shared PC that everyone uses with one account, turning off contacts access for the device and allowing only the email app is a sensible default.

Guest-style or public PCs, such as a PC in a shop or a library, should not have anyone's email account added at all. If you sign in to email in a browser on such a PC, sign out when done and do not let the browser remember the password; your contacts are only one part of what an open email session exposes.

Frequently asked questions

Contact access in Windows comes down to two facts. The switches in Settings, Privacy & security, Contacts decide which Store apps can read your address book, with layers for the whole PC, your account and each app, and Group Policy or the registry can enforce them. And the contacts themselves live in your email accounts, visible in Outlook's People, safe in the cloud, and worth exporting once a year. Ethan's daughter kept her photo app and lost nothing by blocking its contacts access; the app never needed it.

Revision note. Written October 3, 2026, expanding our 2016 guide to denying app access to contacts into a complete guide for Windows 11 and 10. It covers what contact access means, where contacts are stored, the Settings switches, related permissions, desktop programs, Phone Link, Group Policy, the registry, apps that still have contacts, viewing and exporting contacts, missing contacts, and a yearly privacy audit. May your address book stay yours.