Summary
22 items · 30–60 minutes
Why a Privacy Audit Matters
Most people set up accounts and apps in a hurry, accepting defaults without reading what they agree to. Over time, those defaults accumulate: location access granted here, marketing emails opted into there, old accounts left open and forgotten. A privacy audit is simply a scheduled moment to review those decisions with fresh eyes.
If you're new to thinking systematically about digital privacy, the starter framework for online privacy offers useful background on core concepts before you dive in here. And if you've assumed that certain habits — like browsing in incognito mode — keep you well protected, it's worth reading about common online privacy myths that don't hold up under scrutiny.
This checklist is designed to be completed in one sitting. Work through each group in order, or jump to the areas most relevant to you right now.
Password Manager
Stores, generates, and autofills unique strong passwords so you don't need to reuse or memorise them.
Breach-Notification Service
Checks whether your email addresses have appeared in publicly known data breaches.
Your Device's System Settings
The built-in settings panel on your phone or computer is where you manage app permissions, location access, and software updates.
Browser Privacy Settings Panel
Controls cookie behavior, extension management, and saved credentials directly inside your web browser.
How to Use This Checklist
Before you start, gather what you'll need: your device, any password manager you use, and access to the email account tied to your most important logins. Each item below is rated by priority — must items address significant and common risks, should items reflect widely recommended practices, and nice-to-have items offer meaningful but optional improvements.
If you've recently set up a new device, the device setup checklist covers overlapping ground and is worth cross-referencing. For a deeper look at what browser-based tools can and can't protect, see the comparison of browser extensions versus standalone apps.
Passwords & Account Security
App Permissions
Browser & Search Settings
Data-Sharing & Account Privacy
Device & Network Basics
Audit One Device at a Time
Trying to review every device simultaneously often leads to incomplete work. Pick your primary phone or computer first, complete the full checklist for that device, then repeat the process for others. Rushed, partial audits can leave the most-used device under-reviewed while less critical ones get more attention.
After the Audit: Keeping Up the Habit
A one-time audit is a strong start, but privacy settings change — apps update their permissions, services revise their data policies, and new accounts accumulate. Scheduling a brief review every three to six months keeps the effort manageable.
It's also worth understanding what your digital footprint actually looks like at a network level. Our explainer on what your IP address actually reveals helps clarify what observers can and can't infer about you. And if app overload is making it hard to track what you have installed, organising your digital life offers a practical system for cutting through the clutter.
Deleting Accounts Is Not Always Instant
Many services retain your data for a period after you submit a deletion request — some for weeks, others for several months, as disclosed in their privacy policies. Submitting the request is still worthwhile, but don't assume your data disappears immediately. Keep a record of when you submitted each request so you can follow up if needed.
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.