Key Takeaways
Summary
22 items · 30–60 minutes
Why a Privacy Audit Matters
Most people set up accounts, apps, and devices once — then never revisit the defaults. Over time, those defaults quietly accumulate: old email addresses tied to forgotten services, app permissions granted years ago, and social media settings that have shifted with platform updates. A privacy audit is simply a structured review of your digital footprint, designed to help you spot gaps before they turn into problems.
This checklist is built for non-technical users. You don't need special software or expertise — just time, a device, and the willingness to check a few settings. If you're new to the underlying concepts, our complete privacy starter resource covers the foundational ideas worth understanding first.
Work through each group at your own pace. Some items take seconds; others — like cleaning up old accounts — may take a little longer. The goal is a clearer picture of where you stand, not perfection overnight.
Passwords and Authentication
Account and App Cleanup
Device and App Permissions
Social Media Privacy Settings
Browser and Search Habits
Email and Communications
Tools That Make the Audit Easier
You don't need every tool listed here, but having the right ones on hand will make this process faster and the results more durable.
Password Manager
Generates strong, unique passwords for every account and stores them securely so you only need to remember one master password.
Breach-Checking Service
Lets you enter your email address to see if it has appeared in publicly known data breaches.
Your device's Settings app
Used to review and revoke app permissions for location, camera, microphone, and contacts on your phone or tablet.
Browser Privacy Settings Panel
Built into every modern browser, this is where you control cookie behavior, tracking protection, and saved site data.
Email Provider's Security Dashboard
Most email providers offer a security or privacy section showing logged-in devices and authorized third-party apps.
Authenticator App
Generates time-limited codes for two-factor authentication, offering stronger protection than SMS-based codes.
After the Audit: Keeping Privacy Maintained
Completing this checklist once is a solid start, but privacy is an ongoing practice rather than a one-time fix. Schedule a reminder to revisit these items every six to twelve months, or whenever you get a new device, change jobs, or start using a significant new service.
A few areas deserve extra ongoing attention. Your browser is one of the most active data-collection points on your device — see which browser privacy settings are worth turning on for a focused walkthrough. Social platforms also change their privacy controls frequently, so reviewing platform-by-platform privacy controls periodically is worthwhile.
Finally, don't underestimate the role of accurate beliefs. Some widely held privacy assumptions — like the idea that incognito mode makes you invisible online — can give a false sense of security. Common online privacy myths are worth reviewing so your efforts are focused where they actually count.
Don't Skip the Inactive Account Step
Old accounts you haven't used in years can still hold your name, address, payment details, or photos — and they're often protected by outdated, weak passwords. If a service suffers a data breach, those dormant accounts are just as exposed as active ones. Deleting accounts you no longer use is one of the simplest ways to shrink your data footprint.
Verify Breach-Checking Tools Before Using Them
Only enter your email address into well-established, reputable breach notification services. Entering your email into an unknown or poorly reviewed site could itself expose your information. Check user reviews and independent coverage before trusting any tool with your data.