Key Takeaways
- Default social media settings are often set to maximum visibility — not maximum privacy.
- Third-party apps connected to your accounts can access more data than you realise.
- Strong, unique passwords and two-factor authentication are non-negotiable baseline protections.
- Location data embedded in posts and profile details can reveal more than intended.
- Regular audits — at least twice a year — keep your privacy posture current as platforms update their policies.
Summary
22 items · 30–60 minutes
Why a Social Media Privacy Audit Matters
Most social media platforms are designed to share — which means their default settings often favour visibility over privacy. When you create an account, your posts, contact details, and activity may be discoverable by far more people than you intend. Over time, you also accumulate connected apps, old phone numbers, and outdated permissions that quietly expand your exposure.
A privacy audit is a structured review of every setting that controls who sees your information and how platforms use it. It is not a one-time fix; platforms routinely update their privacy interfaces and introduce new data-sharing features, sometimes with minimal notice. Scheduling a review every six months is a reasonable baseline for most users.
This checklist walks through the key areas to examine across major social platforms. While the exact menu names vary by app and update cycle, the underlying categories — visibility, authentication, connected apps, and data use — apply universally. Many widely held beliefs about online safety can give users a false sense of confidence; this checklist helps you verify your actual settings rather than assume they are correct.
Account Security
Profile Visibility
Post and Content Settings
Connected Apps and Permissions
Data and Ad Settings
Ongoing Maintenance
Tools You Will Need
No specialised software is required for a social media privacy audit. The process relies entirely on the settings panels built into each platform. Before you begin, gather the following:
Password manager
Generates and stores strong, unique passwords for each social account so you do not have to remember them.
Authenticator app
Provides time-based one-time codes for two-factor authentication, which is more secure than SMS verification codes.
Personal email access
Required to verify and update the recovery email addresses linked to each social account.
Spreadsheet or notes app
Helps you track which platforms you have audited, what changes you made, and when to review again.
If you manage accounts for children or teenagers, the considerations are more involved. See our overview on protecting children online for guidance specific to younger users.
Going Further: Your Broader Digital Footprint
Social media settings are only one layer of your online privacy. The same data you share on social platforms may also be harvested by data brokers — companies that compile personal profiles from public records and online activity. Understanding how data brokers collect your information is a natural next step after completing this audit.
Your devices also play a role. Default smartphone settings can quietly log location data, app usage, and more — a reality explored in depth in our guide on what your smartphone's settings menu is quietly tracking. Treating your social media audit as part of a broader digital hygiene routine — rather than an isolated task — will give you the most durable protection.
Platform settings change without warning
Social media companies regularly update their interfaces and introduce new data-sharing features, sometimes resetting preferences you previously configured. Do not assume settings you adjusted months ago are still in place. After any major app update, it is worth checking your privacy settings again to confirm nothing has changed.