Back to Blog

Privacy Guide

Social Media Privacy Guide 2026: Lock Down Your Profiles Before Data Brokers Scrape Them

11 min read

Your social media profiles are a goldmine for data brokers. They scrape your bio, photos, location check-ins, tagged posts, and relationship data, then cross-reference it with public records to build more accurate profiles to sell. Here is how to lock down every major platform before that happens.

What Data Brokers Scrape From Social Media

Data brokers run automated scrapers that collect publicly available information from social platforms at scale. The specific data they target includes:

  • Name and username — used to link accounts across platforms
  • Profile photo — used for facial recognition cross-matching
  • Bio information — employer, city, school, links to other accounts
  • Contact information — phone or email if listed publicly
  • Location data — check-ins, tagged locations, geotagged photos reveal home, work, and routine
  • Relationship data — tagged family members help brokers build family graphs
  • Interests and affiliations — used for behavioral profiling and targeted marketing

The real damage comes from cross-referencing. A data broker might combine your Facebook bio (employer, city) with your LinkedIn profile (full work history) and county property records (home address) to build a profile far more detailed than any single source could provide. Social media confirms and updates data they already have from public records.

Facebook Privacy Lockdown

Facebook has the most granular privacy controls of any major platform, and the most defaults set to "public." Work through these settings in order:

  1. Who can see your posts: Settings & Privacy > Privacy > Your activity > Who can see your future posts → Friends
  2. Profile visibility: Settings > Privacy > Profile and tagging → Set hometown, workplace, education, and phone number to Friends or Only Me
  3. Turn off Location Services: In the Facebook mobile app, go to App Settings and disable precise location
  4. Disable Face Recognition: Settings > Face Recognition > Do you want Facebook to be able to recognize you in photos and videos? → No (if still available in your region)
  5. Off-Facebook Activity: Settings > Your Facebook Information > Off-Facebook Activity → Clear history and turn off future tracking from third-party sites that share data with Facebook
  6. Limit past post visibility: Settings > Privacy > Your activity > Limit the audience for old posts on your timeline → Limit Past Posts
  7. Disable search engine linking: Settings > Privacy > How people can find and contact you > Do you want search engines outside of Facebook to link to your profile? → No
  8. Revoke unused app access: Settings > Apps and Websites → Review all connected apps and remove anything you no longer use or don't recognize

Instagram Privacy Lockdown

Instagram defaults to a public account, which means your photos, captions, location tags, and bio are visible to anyone — including data broker scrapers.

  1. Make your account private: Settings > Privacy > Account Privacy → toggle Private account on. Existing followers keep access; new followers must request approval.
  2. Turn off Activity Status: Settings > Privacy > Activity Status → disable so others can't see when you're online
  3. Disable Story sharing to Facebook: Settings > Account > Sharing to other apps → disconnect Facebook cross-posting
  4. Review third-party app access: Settings > Security > Apps and Websites → revoke access to anything unused
  5. Disable "Photos of You" auto-tagging: Settings > Privacy > Tags → turn off Allow tags from everyone; change to manually approve tags
  6. Disable "Similar Account Suggestions": Settings > Account > Similar Account Suggestions → turn off so Instagram doesn't suggest you to others based on shared contacts

LinkedIn Privacy Settings

LinkedIn is frequently scraped because profiles are professional, detailed, and often public by default. These settings reduce your exposure without hurting your professional presence:

  1. Control who sees your connections: Settings > Privacy > Who can see your connections → change to Only you or Connections. Exposing your full network helps scrapers map professional relationships.
  2. Turn off "profile viewed" notifications: Settings > Privacy > Profile viewing options → change to Anonymous LinkedIn Member when browsing others' profiles
  3. Disable data use for third-party advertising: Settings > Data Privacy > Data for LinkedIn ads → turn off all three options
  4. Control discoverability: Settings > Visibility > Who can find you > Allow others to find you by email or phone number → turn off both
  5. Control search engine indexing: Settings > Visibility > Edit your public profile → turn off "Your profile's public visibility" if you don't need to be found externally, or selectively disable sections

X (Twitter) Privacy Settings

X is one of the most heavily scraped platforms because its API was historically open and most accounts are public. These settings reduce your exposure:

  1. Protect your posts: Settings > Privacy and Safety > Audience and tagging > Protect your posts → enable. Only approved followers can see your tweets.
  2. Disable precise location: Settings > Privacy and Safety > Location information → turn off both location in posts and precise location
  3. Turn off data sharing: Settings > Privacy and Safety > Ads Preferences → disable all personalization and data options including "Allow Twitter to share your data with business partners"
  4. Disable discoverability: Settings > Privacy and Safety > Discoverability and contacts → turn off both "Let others find you by your email" and "Let others find you by your phone"
  5. Remove phone number: Settings > Account > Phone → remove your phone number from your account entirely

TikTok Privacy Settings

TikTok collects an unusually broad range of device and behavioral data. Beyond video privacy, these settings reduce what the app itself collects and shares:

  1. Make your account private: Settings > Privacy > Private account → enable. This limits who can see your videos and follow you.
  2. Disable "Suggest your account to others": Settings > Privacy > Suggest your account to others → turn off all options
  3. Turn off location sharing: At the device level, revoke TikTok's location access (iOS: Settings > TikTok > Location → Never; Android: Settings > Apps > TikTok > Permissions > Location → Deny)
  4. Limit ad data use: Settings > Privacy > Ads > Ad personalization → turn off; Settings > Privacy > Ads > Off-TikTok activity → clear and disable
  5. Disable contact and Facebook syncing: Settings > Privacy > Sync contacts and Facebook friends → turn off both

Google and YouTube

Google is not a social media platform in the traditional sense, but your Google account activity, searches, location, YouTube watch history, feeds into data broker enrichment pipelines through advertising data partners. Take these steps:

  1. Review and delete past activity: Visit myactivity.google.com to see everything Google has logged. Use "Delete activity by" to clear historical data.
  2. Pause Location History: Google Account > Data & Privacy > Location History → turn off and delete existing history
  3. Pause Web & App Activity: Google Account > Data & Privacy > Web & App Activity → turn off. This stops Google from storing your searches.
  4. Control discoverability: Google Account > Personal info > Choose what others see → review and restrict what's visible on your Google profile
  5. Delete past searches: myactivity.google.com → filter by Search and delete in bulk. Reduces the behavioral profile Google can sell to advertisers.

The Bigger Picture: Social Media Isn't Enough

Locking down your social media profiles is a good first step, but it's only step one. Even if every one of your accounts is set to private today, data brokers already have extensive profiles built on data that social media settings can't touch:

  • Voter registration records — public in most states, contain your address, party affiliation, and sometimes date of birth
  • County property records — if you own a home, your name, address, and purchase price are public record
  • Court filings — civil suits, bankruptcies, divorces, and criminal records are generally public
  • Old social media data — scraped before you changed settings, and already sold to hundreds of downstream brokers
  • Marketing data — purchase history from loyalty cards, retail data sold to brokers

Changing your privacy settings stops new data from being collected. Removing yourself from data broker sites addresses the data that's already out there, the profiles that exist right now and are being sold today. For comprehensive removal across 500+ sites, see GhostVault's automated removal service.

See What Data Brokers Already Have on You

Run a free scan to see which data broker sites currently publish your name, address, phone number, and personal history — even after locking down your social media. GhostVault removes it from 500+ sites automatically, starting at $3.99/month.