Social Media Privacy Settings That Actually Matter: Your Checklist

Somewhere in your Facebook settings right now, there’s a toggle that lets search engines link to your profile. It’s probably on. You’ve never touched it — and neither has almost anyone else. That’s kind of the point.

Social media privacy settings aren’t just about keeping your posts away from your boss. They control what gets handed to advertisers, data brokers, strangers, and that quiz app you logged into once in 2018. Here’s what actually matters — and a checklist you can run through in under 20 minutes.

The Privacy Audit Most People Skip

Most accounts were created years ago, defaults were accepted, and settings have never been revisited since. Those defaults were designed for maximum sharing — that’s good for the platform’s ad business, less great for yours.

A Pew Research Center survey found that a large majority of Americans feel they have little control over how companies collect and use their personal information online. What that stat leaves out: a surprising amount of that control actually exists in your settings. It’s just not where anyone looks.

This isn’t a digital-minimalism lecture. It’s a bolt-tightening exercise. Fifteen minutes, a handful of settings, and you’re genuinely better off than most people who use these apps every day.

READ ALSO: The Best Password Managers That Actually Make Your Life Easier

Who Can See Your Profile? (Check Your Settings)

The most basic setting — and the most ignored — is your audience control. Not just who sees your posts, but who can look you up by your phone number or email, and whether your profile shows up in Google results.

Even on a private account, certain things stay publicly visible: your profile photo, bio, username, and often your follower count. Check what’s exposed before someone even follows you. On Facebook, this lives under Settings → Privacy → How People Find and Contact You. On Instagram: Settings → Privacy → Profile Privacy.

The Electronic Frontier Foundation’s Surveillance Self-Defense guide lists search discoverability as one of the first things to lock down — especially if your name is distinctive enough that a Google search for it pulls up your social profiles. A quick toggle change fixes this entirely.

READ ALSO: Your Digital Footprint Is Bigger Than You Think — Here’s How to Shrink It

Controlling Your Data and Ad Targeting

Here’s the part that tends to make people pause: even if your profile is locked down tight, the platforms are still building a detailed ad profile of you in the background. Every like, scroll-pause, search, and click is logged and fed into targeting systems.

Facebook has a tool called “Off-Facebook Activity” — find it under Settings → Your Facebook Information → Off-Facebook Activity. It shows you every website and app that has been reporting your behavior back to Meta, even when you weren’t on Facebook at all. The Guardian’s data protection coverage has documented how this tracking follows you across the internet via Meta’s Pixel embedded on third-party sites. You can clear the history and limit future tracking from the same screen.

On Instagram, Settings → Ads → Ad Preferences lets you review and edit the interest categories Meta uses to target you. On TikTok, it’s Settings → Privacy → Personalization and Data — switch off ad personalization based on off-TikTok activity. Consumer Reports’ privacy coverage breaks down what each platform actually does with this data if you want the longer read.

READ ALSO: Data Brokers Are Selling Your Info — Here’s How to Get It Removed

Platform-by-Platform: Instagram, Facebook, TikTok

Let’s get specific. Here’s exactly what to check on each platform — no wandering through menus required.

Instagram

• Private account: Settings → Account Privacy → toggle on. Only approved followers see your content.
• Story resharing: Settings → Privacy → Story → turn off “Allow Resharing to Stories” so people can’t repost your content to theirs.
• Activity status: Settings → Privacy → Activity Status — this shows people when you were last online. Off is fine.
• Who can message you: Settings → Privacy → Messages → Message Requests. Set to “People You Follow” to stop cold DMs from strangers.

Facebook

• Privacy Checkup: Meta built a guided walkthrough directly into settings — Settings → Privacy Checkup. It takes about five minutes and covers the most important things automatically.
• Search engine linking: Settings → Privacy → “Do you want search engines outside of Facebook to link to your profile?” Turn it off unless you specifically want your Facebook appearing in Google results.
• Location history: Settings → Location → Location History. Clear what’s stored and turn it off going forward. Wired’s ongoing privacy reporting has covered how location data from social apps gets used in ways most people never anticipate — including by third parties far downstream.

TikTok

• Private account: Settings → Privacy → toggle on Private Account.
• Suggest to contacts: Settings → Privacy → Suggest Your Account to Others — turn off both “Contacts” and “Facebook Friends.” This syncs your phone’s contact list to TikTok’s servers.
• Location: Settings → Privacy → Location Services — set to “Never.” The Verge’s privacy coverage has tracked TikTok’s data practices closely if you want the full picture.
• Duet and Stitch: Privacy → Duet / Stitch — set to “Friends” or “No One” if you’d rather strangers not remix your videos.

READ ALSO: Phone Security Tips for iPhone and Android That Actually Work

Third-Party Apps: The Permission Audit

Remember logging into some random app with “Continue with Facebook”? That app probably still has access to your profile data — maybe your email, birthday, and friends list — and you’ve likely forgotten it exists entirely.

On Facebook: Settings → Security and Login → Apps and Websites. On Instagram: Settings → Security → Apps and Websites. Look at the list, revoke anything you don’t recognize or haven’t used in the last year. Security journalist Brian Krebs has written about how forgotten app connections become breach entry points — the problem isn’t Facebook getting hacked, it’s that quiz site from 2017 getting hacked and taking your linked credentials with it.

On TikTok, check Settings → Privacy → Connected Apps. Also worth doing: check your phone’s system settings (iOS or Android) for a full overview of which apps have which permissions. CISA, the federal cybersecurity agency, recommends treating app permission reviews as regular maintenance — not a one-time setup task.

Do This Today: Your Privacy Checklist

Here’s the 15-minute version. Run through this once and you’ll be in better shape than most people who’ve been on these platforms for years:

• Switch Instagram and TikTok to private (if you don’t need a public profile).
• Run Facebook’s built-in Privacy Checkup tool.
• Turn off search engine linking on Facebook (Settings → Privacy).
• Clear your Off-Facebook Activity and limit future tracking (Settings → Your Facebook Information).
• Disable “Suggest to Contacts” on TikTok.
• Revoke old third-party app access on Facebook, Instagram, and TikTok.
• Turn off location services for social apps at the phone OS level — not just in-app.
• Switch off activity status on Instagram and Messenger.
• Check who can message you on each platform and tighten it up.

If you want to go further, EFF’s Surveillance Self-Defense is free, thorough, and regularly updated. Mozilla’s privacy resource hub is also worth bookmarking — these settings menus change constantly, usually right around the time people start paying attention to them (coincidence, surely).

None of this makes you invisible online. But it closes a lot of doors that were wide open, and that’s an honest win for a Tuesday afternoon. Want more practical stuff like this delivered without the noise? The DLM newsletter is a weekly drop of things worth knowing — inbox joy, no spam, guaranteed.

UP NEXT: Do You Actually Need a VPN? An Honest Answer for Normal People