How to protect your privacy on social media without quitting

Social media runs on personal data — yours. But protecting your privacy does not require deleting your accounts and disappearing. With the right settings and a few habits, you can keep the parts of social media you enjoy while sharply limiting what platforms, advertisers, and strangers can learn about you. Here is how.

Start with an audit

Before changing settings, understand your current exposure. Most platforms offer a way to view your profile as the public sees it — use it. You may be surprised what is visible: your location, your friends list, old posts, photos you forgot about. This baseline tells you what needs locking down.

Lock down the core privacy settings

• Set posts to friends/followers only rather than public, unless you have a specific reason to be public.
• Restrict who can find you by phone number or email — a setting that, left open, lets strangers and data brokers link your profile to your contact details.
• Hide your friends/connections list where possible, since it reveals your social graph.
• Turn off location tagging on posts, and review whether the app has background location access it does not need.
• Disable face recognition features if the platform offers them.

Tame the advertising machine

Platforms build detailed profiles to target ads. You can limit this:

• Review and reset your ad preferences, removing inferred interests and disabling targeting based on partner data where the option exists.
• Turn off off-platform activity tracking, which lets platforms follow you across other websites and apps.
• On iPhone, deny apps permission to track via the system-level tracking control, which blocks cross-app tracking at the source.

Think before you share

Settings matter, but so does what you post. A few principles dramatically reduce risk:

• Do not broadcast your location in real time — posting that you are on holiday tells the world your home is empty.
• Avoid sharing information used for security questions — pet names, schools, birthplaces — which can help attackers reset your accounts.
• Be careful with photos that reveal your home, workplace, children's schools, or documents in the background.
• Remember that "private" is never absolute — anything you share can be screenshotted and spread.

Secure the accounts themselves

A privacy-locked account is worthless if someone hijacks it. Protect each social account with a strong, unique password and two-factor authentication. Social accounts are prime targets because they can be used to scam your friends and harvest more data. Our password security guide covers this in depth.

Watch for impersonation and phishing

Social platforms are riddled with phishing — fake "your account will be deleted" messages, bogus prize notifications, and impersonation of friends whose accounts were compromised. Be sceptical of links and login prompts, and verify unusual requests through another channel. If you receive a suspicious link, check it with the URL scanner before clicking.

Prune periodically

Privacy is not a one-time setup. Every few months: delete old posts you no longer want public, remove apps you have connected to your social accounts (each connection is a data pathway), review which devices are logged in, and reconsider what your profile reveals. Platforms also change their settings and defaults over time, sometimes resetting your choices, so a periodic check keeps you in control.

Social media's business model will always pull toward collecting more of your data. But the controls to push back exist, and using them costs you almost nothing in enjoyment. Spend twenty minutes locking down your accounts today, and you reclaim a meaningful amount of privacy without giving up the platforms you value.

Frequently asked questions