Summary
18 items · 30–60 minutes
Why a Social Media Privacy Audit Matters
Social media platforms are designed to encourage sharing — and their default settings reflect that goal. Out of the box, most accounts allow broad visibility of your posts, profile details, and activity. Many also grant third-party apps ongoing access to your data, sometimes indefinitely.
Running a structured audit lets you take back control of what you share, with whom, and how your information is used. It doesn't require technical skill — just a methodical approach and about an hour of your time. This checklist walks you through every major area to review.
If you'd like to understand the broader context of why platforms handle data the way they do, our article on the privacy trade-offs of free apps and online services offers useful background. You may also find value in the full digital privacy audit checklist, which covers your broader digital life beyond social platforms.
Platform Privacy Settings Page
The built-in settings menu for each social platform is where you'll make every change in this checklist — bookmark or note the direct URL for each account.
Password Manager
Used to store unique, strong passwords for each social account and to flag any accounts sharing reused credentials.
Authenticator App
Generates time-based one-time codes for two-factor authentication, offering stronger protection than SMS-based verification.
Device Permission Settings (iOS / Android)
Used to review and revoke app-level permissions — such as location and contacts — granted to social apps at the operating system level.
Working Through the Checklist
Work through each group below on each platform you actively use — at minimum, the ones where you've posted personal content or connected other apps. Keep in mind that platforms update their settings menus periodically, so the exact location of each option may shift over time; use the platform's built-in search or help center if you can't locate a setting.
Profile Visibility
Audience Controls for Posts
Connected Apps and Third-Party Access
Location and Contact Data
Advertising and Data Use
Account Security
Revoking App Access Has Limits
Removing a third-party app's access to your social account prevents it from collecting new data going forward, but it does not automatically delete data the app already collected. If you're concerned about what a particular app has stored, check that app's own privacy policy or account deletion process for options to request data removal.
Once you've completed this audit, note the date. Plan to revisit these settings every six to twelve months, or whenever a platform announces a major policy update. For a deeper look at what specific settings to change and why they matter, see our companion piece on social media privacy settings that actually matter.
Your social accounts are just one part of the picture. The principles behind keeping your devices secure — strong authentication, limited permissions, timely updates — apply here too. And if you're curious about the broader trail your online activity leaves behind, our article on your digital footprint explains what gets recorded and how to manage it.
Platform Settings Change — Check Regularly
Social media platforms periodically reorganise their settings menus and introduce new data-sharing features, sometimes with opt-out defaults. A one-time audit is a strong starting point, but settings you configured six months ago may no longer reflect your preferences today. Build a reminder to revisit this checklist at least once a year, or whenever you see news of a significant platform policy change.
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.