A permission optimization method, applied to an electronic device, wherein the method comprises: displaying, by the electronic device, a first permission access record interface, wherein the first permission access record interface comprises a first permission access record of a first application, the first permission access record comprises an access record in which a privacy risk exists, and the access record in which a privacy risk exists comprises a record in which a first permission has been used by the first application when a specific function of the first application has been disabled and the access record displays a time point of the use and a quantity of times of the use; detecting, by the electronic device, an operation performed by the user on the first permission access record of the first permission access record interface, and displaying a first pop-up interface, wherein the first pop-up interface comprises prompt information and a permission optimization option, and the prompt information is used to remind the user that a risk exists in the first permission of the first application and advise the user to perform permission optimization; detecting, by the electronic device, a permission optimization operation performed by the user on the permission optimization option, wherein the electronic device performs the following operation: allowing the first application to use the first permission only when the specific function is enabled; displaying, by the electronic device, a second permission access record interface, wherein the second permission access record interface comprises a first permission access record obtained after the permission optimization operation is performed, the first permission access record comprises an access record in which no privacy risk exists, and the second permission access record interface is different from the first permission access record interface; and detecting, by the electronic device, an operation performed by the user on the first permission access record of the second permission access record interface, and displaying a second pop-up interface, wherein the second pop-up interface is different from the first pop-up interface. displaying, by the electronic device, a first permission access record interface, wherein the first permission access record interface comprises a first permission access record of a first application, the first permission access record comprises an access record in which a privacy risk exists, and the access record in which a privacy risk exists comprises a record in which a first permission has been used by the first application when a specific function of the first application has been disabled and the access record displays a time point of the use and a quantity of times of the use; detecting, by the electronic device, an operation performed by the user on the first permission access record of the first permission access record interface, and displaying a first pop-up interface, wherein the first pop-up interface comprises prompt information and a permission optimization option, and the prompt information is used to remind the user that a risk exists in the first permission of the first application and advise the user to perform permission optimization; detecting, by the electronic device, a permission optimization operation performed by the user on the permission optimization option, wherein the electronic device performs the following operation: allowing the first application to use the first permission only when the specific function is enabled; displaying, by the electronic device, a second permission access record interface, wherein the second permission access record interface comprises a first permission access record obtained after the permission optimization operation is performed, the first permission access record comprises an access record in which no privacy risk exists, and the second permission access record interface is different from the first permission access record interface; and detecting, by the electronic device, an operation performed by the user on the first permission access record of the second permission access record interface, and displaying a second pop-up interface, wherein the second pop-up interface is different from the first pop-up interface. allowing the first application to use the first permission only when the specific function is enabled; displaying, by the electronic device, a second permission access record interface, wherein the second permission access record interface comprises a first permission access record obtained after the permission optimization operation is performed, the first permission access record comprises an access record in which no privacy risk exists, and the second permission access record interface is different from the first permission access record interface; and detecting, by the electronic device, an operation performed by the user on the first permission access record of the second permission access record interface, and displaying a second pop-up interface, wherein the second pop-up interface is different from the first pop-up interface.