Social media is free because your attention and your data pay for it. Every photo, like, location tag, and quiz answer helps platforms build a profile of you, and much of that profile is shared with advertisers by default. You do not have to delete your accounts to take back control: a few minutes in each app’s privacy settings can sharply reduce what is collected and who can see your posts. Here are ten settings to change today.
1. Make Your Account Private
This is the single most effective change. A public account lets anyone, including strangers and bots, view your photos and collect your posts. Switching to private means only approved followers can see what you share. On Instagram and TikTok this is one toggle; on Facebook, limit future posts to friends. Keep public accounts only for a genuine business or creator profile.
2. Turn Off Location Tagging
Location data is among the most sensitive information a phone can leak. Many apps tag your posts with a location by default, and some record your location in the background even when you are not posting. Turn off precise location permission for social apps in your phone settings, and let them use approximate location only if they need it at all. Remove location tags from old posts, and avoid posting holiday photos in real time, which tells the world your home is empty.
3. Review Who Can Tag You and Mention You
Tags link your name and face to other people’s posts, often without your knowledge. Set tag approval to manual so nothing appears on your profile until you approve it. Limit mentions to people you follow, and turn on face-recognition controls where they exist so the platform asks before suggesting your name in someone else’s photo. This one setting prevents embarrassing photos and unwanted associations from spreading under your name.
4. Stop Apps Tracking You Across Other Apps and Websites
Social platforms track your activity far beyond their own apps, through embedded buttons, pixels, and advertising identifiers. On iPhone, turn on “Ask App Not to Track” for each social app. On Android, delete your advertising ID and turn off ad personalisation in Google settings. In each app’s own privacy menu, turn off “off-platform activity” and personalised ads where the option exists. You will still see adverts, but they will be less tailored to your browsing history.
5. Limit Your Audience for Old Posts
Privacy settings usually apply only to future posts, leaving years of old content public. Facebook offers a “limit past posts” tool that converts all old public posts to friends-only in one tap, and similar bulk audience tools exist on other platforms. Spend a few minutes running this on each account, then use the “view as” or “preview profile” feature to see what a stranger actually sees. You will often be surprised by how much old content was still public.
6. Turn Off Ad Personalisation and Data Sharing With Partners
Buried in the settings of every major platform is a toggle that lets it share your data with advertising partners and use your activity to personalise ads. Turn these off. Also review the list of apps and websites you signed into with Facebook or Google: each one may still hold access to your profile, friends list, or email address long after you stopped using it. Revoke access for anything you no longer recognise or need, and prefer signing in with an email address and a password manager instead.
7. Disable Read Receipts, Activity Status, and Online Indicators
Read receipts and “active now” indicators seem harmless, but they broadcast your habits: when you wake, when you work, and when you are online late at night. Turning them off gives you back control over who knows you are around, and it also stops friends and strangers from pressuring you for instant replies. The same applies to story viewers and live-location sharing in messaging apps: share your live location only for a set time with a trusted person, never indefinitely.
8. Use Strong, Unique Passwords and Two-Factor Authentication
A privacy setting is useless if someone else can log into your account. Use a unique password for every social account, stored in a password manager, and turn on two-factor authentication using an authenticator app rather than SMS where possible. Check the “logged-in devices” page in each app and sign out of devices you do not recognise.
9. Be Careful With Quizzes, Filters, and Third-Party Apps
Personality quizzes, face filters, and “which celebrity are you” apps often ask for far more permission than they need: your friends list, your photos, your email address. Before granting access, ask whether the app truly needs it, and check its reviews and developer. After using a quiz or filter app, revoke its access in your social account’s connected-apps page. A good rule is that if an app is free and asks for your full profile to tell you something trivial, your data is the product.
10. Clean Up Your Digital Footprint Regularly
Privacy is not a one-time fix. Set a reminder every few months to review your privacy settings, because apps reset or move them after updates. Delete old posts you no longer want public, remove followers you do not recognise, and download a copy of your data from each platform once a year to see exactly what it holds about you.
Conclusion
Protecting your privacy on social media does not require quitting the platforms you enjoy. Make your account private, turn off location tagging and cross-app tracking, limit old posts, cut off data sharing with partners, hide your activity status, lock your account with two-factor authentication, and regularly clean up connected apps and old content. Each change takes a minute, and together they turn a wide-open profile into one you actually control. Your data is valuable; treat it that way, and make the platforms earn your trust instead of taking it by default.