Every time you sign up for a service, install an app, or browse a website, you’re handing over data about yourself. Where you are, what you’re interested in, who you talk to, what you buy, when you sleep. Most of us know this on some level, but we don’t really think about the cumulative picture that all this data creates.

You don’t have to live off the grid to protect your privacy. But there’s a huge middle ground between “I don’t care who sees my data” and “I’ve deleted all my accounts and communicate via carrier pigeon.” Here’s how to land somewhere sensible.

Start With Your Browser

Your web browser is the biggest window into your online life. If you’re still using Chrome without any privacy settings adjusted, you’re essentially live-streaming your browsing habits to Google.

Switch to Firefox or Brave. Both have strong default privacy protections. Firefox blocks trackers automatically. Brave goes further by blocking ads and fingerprinting attempts. If you really can’t leave Chrome, at least install uBlock Origin and adjust your privacy settings to block third-party cookies.

Use a private search engine. DuckDuckGo or Startpage give you search results without tracking your queries. Google’s search results are personalised based on your history, which means you’re living in a filter bubble. Privacy-focused search engines show you the same results regardless of who you are.

Your Phone Knows Everything

Your smartphone tracks your location constantly, even when you’re not using maps. It knows which wifi networks you connect to, which Bluetooth devices are nearby, and which apps you use most.

Audit app permissions. Go through every app and check what it has access to. Does a flashlight app really need your contacts? Does a game need your location? Revoke anything that doesn’t make sense. Both iOS and Android make this straightforward in settings.

Turn off location services for any app that doesn’t absolutely need them. Maps needs location. Weather might. Your note-taking app and your calculator do not.

Review advertising identifiers. Both iOS and Android let you limit ad tracking. On iPhone, turn off “Allow Apps to Request to Track” in Privacy settings. On Android, delete your advertising ID in Privacy settings.

Passwords and Authentication

If you’re still using the same password for multiple accounts, this is your wake-up call. Data breaches happen constantly. If your email password was exposed in a LinkedIn breach from three years ago, and you use the same password for your bank, you have a serious problem.

Use a password manager. Bitwarden is free and open source. 1Password is excellent for families. Generate a unique, random password for every account. You only need to remember one master password.

Enable two-factor authentication on everything important. Email, banking, social media, cloud storage. Use an authenticator app (not SMS — SIM swapping attacks make text-based 2FA unreliable). Google Authenticator and Authy are both solid options.

Email Privacy

Your email address is the key that connects most of your online accounts. Protecting it matters more than people realise.

Use email aliases. Services like SimpleLogin or Apple’s “Hide My Email” let you create unique email addresses for every service you sign up for. If one gets leaked or sold, you can disable it without affecting anything else.

Be cautious with email links. Phishing attacks are getting more sophisticated. If an email asks you to click a link and enter your credentials, go to the website directly instead. This takes five extra seconds and eliminates one of the most common attack vectors.

Social Media Hygiene

Social media companies make money by collecting and selling data about your behaviour. That’s their business model. You can’t change that, but you can limit what they collect.

Tighten your privacy settings. Every platform has them, and they’re worth reviewing annually because they change. Limit who can see your posts. Disable face recognition. Opt out of data sharing with “partners.”

Be selective about what you share. Real-time location check-ins, photos of boarding passes, pictures that show your street address or car registration — all of these are data points that can be used in ways you didn’t intend.

VPNs: Worth It or Not?

A VPN encrypts your internet traffic and hides your IP address. It’s useful on public wifi, when travelling, or if you don’t want your ISP logging every website you visit. It’s not a magic privacy shield, despite what the advertisements claim.

If you use one, choose a reputable provider that doesn’t log your activity. Mullvad and ProtonVPN are well-regarded. Avoid free VPNs — if you’re not paying for the product, you are the product.

The Mindset Shift

Privacy isn’t about hiding. It’s about control. You should get to decide who sees your data, how it’s used, and when it’s deleted. Most of the steps above take an afternoon to implement and then run quietly in the background.

You don’t have to do everything at once. Start with a password manager and browser change this week. Add email aliases and app permission audits next week. Build up your privacy posture gradually, and it becomes second nature.

Your data is valuable. Treat it that way.