Summary

22 items · 30–60 minutes

Why a yearly privacy check matters

Your digital life isn't static. Apps update their data policies, new devices join your home network, and accounts you opened years ago may still be collecting information you've long forgotten about. A once-a-year privacy audit — think of it like changing the batteries in a smoke detector — helps you stay ahead of creeping exposure.

You don't need to be tech-savvy to do this. Most of the steps below take just a minute or two inside settings menus you already have access to. The checklist covers four main areas: your accounts and passwords, your phone apps, your social media settings, and connected devices in your home. Work through it at whatever pace suits you — you can split it across a couple of evenings if needed.

For a deeper look at how apps accumulate unnecessary access over time, see our guide to app permissions worth reviewing.

Accounts and passwords

Change passwords on your most sensitive accounts — email, banking, and health portals — using a passphrase or a password manager-generated string. Must
Turn on two-factor authentication (2FA) for any account that supports it, especially email and financial accounts. Must
Check your email provider's "connected apps" or "third-party access" list and revoke access for apps you no longer use. Must
Search your inbox for old accounts you may have signed up for but forgotten, and delete or deactivate them. Should
Check whether your email address appears in any known data breaches using a free service such as Have I Been Pwned (haveibeenpwned.com). Should

Phone apps and permissions

Open your phone's settings and review which apps have access to your location — switch any non-essential apps from "Always" to "Only while using" or off entirely. Must
Review microphone and camera permissions and revoke access for any app that doesn't have an obvious need for them. Must
Delete apps you haven't opened in the past six months — unused apps still hold permissions and may still send data. Should
Check which apps have access to your contacts list and remove access for any that don't genuinely need it. Should
Review notification permissions and turn off access for apps that don't add value — this also reduces distraction. Nice to have

Social media privacy

Set your social media profile visibility to the audience you actually want — "Friends" or "Private" rather than "Public" if you prefer a smaller reach. Must
Review the "Apps and websites" section in your social account settings and remove any third-party apps that still have login access. Must
Turn off location history and location tagging on posts if you don't actively use those features. Should
Check ad preferences or data settings in each social platform and opt out of interest-based profiling where the option exists. Should
Review who can see your friends list, birthday, and email address on your profiles. Nice to have

Connected and smart home devices

Log into the app for each smart home device and check that firmware or software updates have been applied. Must
Remove any users or guest accounts on smart home apps that no longer need access. Must
Change default passwords on routers and smart devices if you haven't done so already. Must
Check your Wi-Fi router's connected devices list and flag anything unfamiliar. Should
Review voice assistant history (Alexa, Google Assistant, Siri) and delete recordings you no longer want stored. Should
Turn off features on smart devices that you never use, such as remote access for a device that stays in one place. Nice to have
Consider placing smart cameras and microphone-enabled devices in low-sensitivity areas of your home. Nice to have

What you'll need before you start

Gather the following before you begin. Having them on hand prevents you from stopping halfway through.

Required

Your phone

Access app permissions, location settings, and installed app lists directly in your device's settings menu.

Required

A password manager

Store and generate strong, unique passwords for each account so you don't have to remember them individually.

Required

List of your active accounts

A simple note or document listing the accounts and services you actively use helps ensure nothing gets skipped.

Optional

Smart home device apps

Log into each companion app to check user access, firmware status, and data settings for connected devices.

Set aside a quiet 30–60 minutes. If you have a household where multiple people share devices or accounts, consider doing this check together so everyone is on the same page.

Don't log in on public Wi-Fi while auditing

If you're accessing sensitive accounts like banking or email during this check, do it on a trusted home network rather than a public or shared Wi-Fi connection. Public networks can expose your login credentials to others on the same network. If you need to do this audit while traveling, use your phone's mobile data connection instead.

Smart home and connected devices

Smart speakers, thermostats, cameras, and other connected devices often get set up once and then forgotten — but they can accumulate access to your network and data over time. Reviewing them as part of your annual check is worth the extra few minutes.

Our smart home security checklist covers this in more detail, but the core habit is simple: log into each device's app once a year, check who has access, and confirm the firmware is up to date.

Old accounts carry real risk

An account you opened years ago and never use can still hold personal data — your name, address, payment information, or browsing history. If that service experiences a data breach, your information is exposed even if you haven't logged in for years. Closing dormant accounts is one of the simplest ways to reduce your overall exposure. Look for a "Delete account" or "Close account" option in settings, and confirm the deletion by email if prompted.

Annual privacy checks pair well with other yearly reviews. If you also do an annual insurance check or a credit report review, consider grouping them on the same calendar date so nothing slips through.

Share

Everyday Tech Editorial Team · Contributor

Everyday Tech Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.

The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.