102 Comments
User's avatar
Your Nextdoor PCP's avatar

Love this checklist, especially the framing that your digital footprint is an attack surface, not just a privacy preference. The “recover old emails → search your inbox for old sign-ups → delete/close accounts” workflow is exactly how I’d triage risk for a patient-facing org: you can’t secure what you’ve forgotten exists. Two clinician-ish add-ons I’d emphasize:

1. Credential hygiene beats willpower. Use a password manager + unique passwords + 2FA/passkeys wherever possible; then leaks become “annoying” instead of catastrophic. Your HaveIBeenPwned + Google removal steps are solid starting points. 2. Data broker + credit controls matter for real-world harm (identity theft, harassment). Freezing credit + opting out of people-search sites often reduces downstream risk more than any single setting toggle.

Also appreciate the reminder that “99%” is aspirational; privacy is a process, and the biggest win is shrinking the easy-to-exploit surface area fast!

Expand full comment
Thomas, an old GI's avatar

Recommend NOT using a VPN that REQUIRES all your personal information in order to HIDE all your personal information.

MULVAD only has an account number. Otherwise they really DO'NT know who I am.

Expand full comment
The Focused Data Scientist's avatar

Gonna be trying that ASAP

Expand full comment
Claire's avatar

this is so interesting.. on the one hand it makes my heart sink because i would like to go through this process but it sounds long and stressful (!) i have over the years had 'burner' accounts as you call it or mixed my real data with fictional (such as names and DOBs) but i dunno if this makes me more or less secure as it would be harder for me to access old accounts to now deleter the data, as i would have forgotten the random made up info i entered at the time. Hmm.

Expand full comment
Bwabbit's avatar

How about we delete the elite and their loyal sociopaths pissing on everything we love instead?

Expand full comment
Deborah Guerrero's avatar

Google is the main account I’d want to delete first.

Expand full comment
Chumz's avatar

Me too! I’ve been transferring my important emails to proton email acct. Once completed, goodbye google acct. They are compromised and have no intention on protecting peoples privacy once the A.I. data base for surveillance is fully implemented.

Expand full comment
Deborah Guerrero's avatar

Just fyi, I’ve read some intel on proton (including vpn) that makes me leery too. I’ll attach if I can find.

Expand full comment
Deborah Guerrero's avatar

Absolutely agree. I’ve not used my gmail for eons, wish I were tech savvy enough to transfer or extract content so I could delete it entirely.

Expand full comment
Adia Bali's avatar

The stalker example at the end is haunting. What struck me most is your point about hackers analyzing for months. It's not paranoia if someone can really piece together your identity from your digital crumbs. The burner accounts and false information strategies are smart.

Expand full comment
rambling rory's avatar

Proton Password manager, Mozilla Relay and some other services provide email aliases.

Expand full comment
Neural Foundry's avatar

The point about habeas corpus losing meaning hits hard. When detention happens first and justification comes later, the entire burden-of-proof structure inverts in ways most people dont realize until they're caught in it. I saw this acceleration in local law enforcement contexts where federal grant money incentivized arrest quotas over community safety, creating feedback loops that punished restraint and rewarded volume.

Expand full comment
Kevin's avatar

About deleting old credit history, this can lower your credit score since they use age of accounts, I don't have enough history anymore it only goes back 25 years and that dings my score.

Had I not cancelled my oldest card ( into the 80's ) I'd have a "perfect" credit score....

Don't need that old credit card but your history is part of your score.

And yes, only an oldster like myself would know that is an issue.

Otherwise a great rundown and a couple of things I hadn't thought of, nice work !

Expand full comment
Bill Lacey's avatar

Credit scores are a scam. Want that “perfect” score? Sign up for 6 more credit cards and carry balances on all of them. They’ll tell you doing that proves to them you can handle credit responsibly. Haha. That’s like telling someone who regularly drives drunk they are a good driver for making it home every night. The incentives for a good credit score are the exact opposite of being fiscally responsible.

Expand full comment
Nancy's avatar

Sadly credit scores are important for younger people needing loans for a home, a car, even renting an apartment but I agree they are indeed a scam that often just encourages people to take on more debt, but fiscal responsibility employed early on will eventually lead one into a position where they don't need to worry about their credit score.

Expand full comment
Kelly's avatar

WOW, i never knew about this stuff before. Glad i see this post, please do more!!!

Expand full comment
amine rafik's avatar

I Learned a lot from this one. thanks for sharing abi

Expand full comment
DoG's avatar

Getting out is the easy part, staying out is key.

It's a good exercise either way, but STAY out.

Key tools to stay out include a very secure browser configured correctly, and if you MUST do a cell phone, use a pixel with grapheneOS or similar.

Great article!

Expand full comment
Salt & Pepper's avatar

I don’t understand the point about NOT using a VPN when you are logging on to bank or financial accounts! I’d think that’s when you’d want it most and always make sure my VPN is engaged before doing anything with accounts!

Expand full comment
Maureen's avatar

Someone said some banking apps may not allow use of a VPN and/or use thereof may trigger fraud alerts. I've been using Nord VPN on my phones and computers for 15 years and have not had an issue with my bank's website or app. I'd say, if your bank allows it, use it.

Expand full comment
eden's avatar

ai generated image?

Expand full comment
Apollo's Lyre's avatar

Who cares?

Expand full comment
eden's avatar

i do, actually

Expand full comment
Brian Wengrofsky's avatar

Is it recommended to use a VPN even when on home network?

Expand full comment
Holli's avatar

Yes, I use both on my phone and desktop. It has helped me stop trackers a lot. Try Proton VPN services and sign up for their secure email too.

Expand full comment
Jordan DoMonte's avatar

Been using proton lately and I'm loving it

Expand full comment
Lucía Cruda's avatar

Yes! You can put it directly to the modem so the network is always protected

Expand full comment
Frank's avatar

I don't see why the author advises against using a VPN for online banking. I would think that having the encrypted connection that a VPN offers is very important for sensitive tasks like online banking.

Expand full comment
Maureen's avatar

Someone said some banking apps may not allow use of a VPN and/or use thereof may trigger fraud alerts. I've been using Nord VPN on my phones and computers for 15 years and have not had an issue with my bank's website or app. I'd say, if your bank allows it, use it.

Expand full comment
Frank's avatar

I have never run into a problem using a VPN with banking apps, either. For sensitive tasks like online banking, always use a VPN when you can.

Some sites like Yelp and T-Mobile block VPNs, but thankfully I have never had a problem with a banking website.

Expand full comment
BornAlive's avatar

excellent question!! i hope someone answers!

Expand full comment
Noel Veva's avatar

It doesn’t seem like a very good idea to type your password for anything into a search engine 🤔

Expand full comment