Step 1: Find and Delete Old Accounts (45 Minutes)
The average person has over 100 online accounts — and actively uses maybe 15 of them. Every abandoned MySpace, old forum registration, and forgotten shopping account contains personal data that can be exposed in a breach. Hackers don't just target your active accounts — they target the ones you forgot about.
How to find them:
- Search your email for "welcome," "verify," "confirm your account," "thank you for registering." Every one of those emails represents an account.
- Check your password manager — every saved login is an account you once created.
- Check "Sign in with Google/Facebook/Apple" in those accounts' settings — you may have dozens of connected services.
- Search your name on haveibeenpwned.com — it shows which breaches your email appears in, revealing accounts you may have forgotten.
For each account you no longer need: log in → find account deletion (usually buried in Privacy or Security settings) → delete. If you can't find the delete option, search "service name delete account" on Google. The service JustDeleteMe provides direct links to deletion pages for hundreds of services.
Step 2: Opt Out of Data Brokers (1-2 Hours)
Data brokers are companies whose entire business is collecting and selling your personal information. They aggregate data from public records, purchase histories, social media, and other sources — then sell comprehensive profiles including your full name, address history, phone numbers, email addresses, relatives' names, estimated income, and more.
The major US data brokers to opt out of immediately: Spokeo, Whitepages, Intelius, BeenVerified, MyLife, PeopleFinders, TruthFinder, Instant Checkmate, PeopleLooker, and US Search. Each requires visiting their privacy portal and submitting an opt-out request. Budget 30-60 minutes to do the top 10 manually.
Automated alternative: Paid services like DeleteMe or Incogni ($10-15/month) monitor 200+ data brokers and submit opt-outs on your behalf. They also re-check quarterly since brokers frequently re-add removed information. These services pay for themselves in time saved after the first use.
Step 3: Remove Personal Info from Google Search
Google now allows you to request removal of personal information from search results — including phone numbers, physical addresses, email addresses, government ID numbers, bank account numbers, medical records, and handwritten signatures. This doesn't remove it from the source website, but it stops it from appearing in Google search results for your name.
Visit Google's "Remove select personally identifiable info" tool, submit the URLs containing your information, and Google typically processes requests within a few days. For outdated content that still appears in search results, use Google's "Remove outdated content" tool to request removal of pages that have already been updated or deleted from the source site.
Step 4: Lock Down Social Media
- Set all personal profiles to private/friends only
- Remove your phone number and email from public profile fields
- Disable search engine indexing of your profile (in privacy settings)
- Delete old posts that contain personal information — photos of your home exterior (visible house number), your car license plate, your workplace, your children's school
- Remove yourself from tagging in other people's posts where possible
Step 5: Use a VPN Going Forward
Cleaning your footprint is step one. Preventing it from growing back is step two. A VPN stops your ISP from building a new browsing profile on you the moment you start using the internet again. Combined with the steps above, it creates a durable privacy foundation.
Complete privacy setup: 10-step digital privacy guide · stop ads and trackers on your phone · what your ISP sees.
Maintenance Checklist (15 Minutes/Month)
- ☐ Check haveibeenpwned.com for new breaches
- ☐ Delete any new unused accounts created that month
- ☐ Verify data broker opt-outs are still active (brokers re-add ~25% of removed profiles within 6 months)
- ☐ Review social media privacy settings — platforms reset them after updates
- ☐ Search your name on Google to catch new exposures
Start With the Foundation
A VPN stops your ISP from building a new tracking profile while you clean up the old one. WireGuard + AES-256 + audited no-logs. 30-day money-back guarantee.
Download on Google Play