According to various embodiments, an electronic device may include: a touch-sensitive display; a processor operatively connected to the display; and a memory operatively connected to the processor, wherein the memory may store instructions that, when executed, cause the processor to: control the display to provide a right setup screen that enables a user to select data which an application is allowed to access among data stored in the memory, receive a read request for the data stored in the memory from the application, select data to be provided to the application among the data stored in the memory based on an access right policy established using the right setup screen, and provide the selected data to the application in response to the read request.