a display;

a communication circuitry;

at least one processor;

memory operatively connected to the display, the communication circuitry, and the at least one processor, the memory storing a plurality of executable instructions, wherein execution of the plurality of executable instructions by the at least one processor causes the electronic device to perform a plurality of operations comprising:

receiving a first evaluation regarding usage of an access permission by at least one application from a server, via the communication circuitry, wherein the access permission comprises permission for the at least one application to access at least one of a specified function, a module, an internal component, or a hardware resource of the electronic device,

generating usage information indicating historical usage of the access permission by the at least one application,

generating a second evaluation of the access permission granted to the at least one application, based at least on the usage information,

determining an evaluation result based on at least one of the first evaluation or the second evaluation, and

determining whether to display a user notification regarding the access permission, based on the evaluation result.