Check the audience, the discovery routes, and the data-use choices separately
A private profile setting is only one part of a social-media privacy review. Your older posts, approved followers, tags, contact syncing, location permissions, connected apps, and account access can each expose different information. Advertising preferences govern another set of choices and should not be confused with who can see your photos. This guide provides a practical review you can complete one account at a time, with official platform references checked in November 2026. The examples name the control to look for and the result to verify, because menus and availability can differ by region, age, account type, and app version. The aim is a clearer, deliberate sharing arrangement rather than a promise that a few switches make an account invisible.
Start inside the real app and identify the account
Open the app directly or use its known website, then confirm which profile you are changing. Someone with a personal account and a public creator account can easily adjust the wrong one. Use the platform’s own settings search or official help when a label differs from this guide. Do not follow a surprise message claiming your privacy must be repaired through an unfamiliar login page.
For Facebook, Meta’s Privacy Checkup guidance provides a starting route through privacy and security choices. Treat a guided review as an aid, not proof that every old post and connected service has been examined. Keep the current account visible as you work and check the relevant result before moving to the next category.
Choose the audience for future content
Find the account privacy or post-audience control and decide who should receive ordinary personal content. A public professional account may serve a legitimate purpose; a personal account may need a narrower audience. Check the choice available for posts, stories, live activity, or other formats you actually use rather than assume every format inherits one identical rule. Read the current platform explanation for any option whose meaning is unclear.
TikTok’s official settings directory links to private/public account choices and individual post privacy controls. The distinction is useful: choosing an overall account mode and choosing an audience for a particular item are related decisions. Do not assume a private setting removes every visible profile detail or revokes every person you previously approved.
Before publishing the next harmless post, inspect its audience selector. If the default is broader than intended, change the applicable setting and verify it again. A deliberate check is more reliable than remembering what the account used to do. Do not publish sensitive material as a test of whether strangers can see it.
Review older posts as their own task
A setting for future posts may not rewrite every historical audience. Select representative older material, especially posts with location details, personal contact information, or information about other people. Use the platform’s supported activity and audience tools to narrow, archive, or remove material according to its current capabilities. Avoid assuming that a newly private account has undone screenshots, downloads, or sharing that happened before the change.
Audit the people already inside the audience
Look through friends, followers, close-friend lists, and other audience groups you use. Remove people you no longer want receiving personal updates through the supported controls. A private account with hundreds of loosely known approved followers can still have a larger audience than you intend. The setting’s label does not decide whether each approved person belongs there.
Pay attention to accounts that appear to duplicate a real contact or have unexpectedly changed identity. Verify a surprising account through a trusted independent route before approving it. You do not need to prove a stranger is malicious to decline a follower request. Choose the audience that fits the information you share.
Inspect what a public visitor can learn
Use the platform’s supported public-view feature where available, or ask a trusted person who is outside the intended audience to help check harmless profile details. Examine biography text, profile images, links, workplace information, and visible relationship details. A public-view check does not reveal every possible search or recommendation result, but it can expose information you forgot was public. Separate details needed for a public role from details that enable unwanted personal contact. A creator might publish a work contact address without publishing a home address or personal routine. Review the wording and links as well as audience controls. Information typed into a public biography can remain public even when ordinary posts have a restricted audience.
Review account suggestions and contact syncing
Look for controls describing how people find your account, account suggestions, and uploaded or synchronized contacts. Decide whether you want the service to connect your profile with people from your address book or linked accounts. Stopping future syncing and removing previously uploaded contacts can be separate actions; follow the platform’s current instructions for both rather than assume disabling a phone permission erases earlier uploads.
TikTok’s suggested-accounts guidance explains controls involving contacts, Facebook friends, and people opening or sending links. It also warns that an account may still be suggested through follows, interactions, or mutual connections even when those suggestion options are off. The useful outcome is reducing selected discovery routes, not promising that nobody you know can ever find the profile.
Check contact access in the phone’s app-permission settings as well as inside the social service. These operate at different layers. Read each prompt before agreeing to find friends or reconnect contacts after an update. A convenience feature can reintroduce a sharing choice you had intended to avoid.
Control tags, mentions, and profile appearance
Find the controls for who may tag or mention you and whether tagged content needs review before appearing on your profile. Decide whether a smaller group or manual review fits your use. Meta’s privacy guidance distinguishes tag review from review of posts appearing on a profile. These controls can affect how your identity is linked or displayed, but they do not give you ownership of another person’s original post.
If an unwanted photograph remains on someone else’s account, hiding it from your own profile is not the same as removing the photograph. Use the service’s reporting and removal-request routes where appropriate, and ask the poster to respect your privacy when that is safe and suitable. Avoid reassurance that one review switch stops every mention elsewhere. Verify the exact effect described by the platform.
Check messages, comments, and activity visibility
Review who can send messages, submit message requests, comment, and see any activity or presence indicators the service provides. Narrow the controls that expose more than you want while keeping the contact routes you actually need. A person maintaining a public professional presence may prefer requests in a separate inbox rather than unrestricted direct contact. The available choices vary, so inspect each setting instead of copying another user’s screenshots.
Review location at the device and post levels
Open the phone’s location permissions for the social app. Decide whether the feature needs location access and whether approximate location is sufficient where offered. Apple’s iPhone location guide explains per-app choices and the Precise Location control. That is an iPhone example; use the official guidance for the device you have.
Then inspect what you intentionally disclose in the post itself. A location tag, visible street sign, boarding pass, or repeated routine can reveal information independent of the phone permission. Turning off precise location does not remove words or landmarks from a photograph. Review the content and audience before sharing, particularly when the post describes where you or another person currently are.
Inspect third-party connections instead of only installed apps
Find authorized apps, connected websites, or integrations in the account’s settings. Review each permission and remove access you no longer need using the service’s supported process. A game or publishing tool authorized years ago may not appear among the apps currently installed on your phone. Deleting the phone app and revoking its account connection are different actions.
Before disconnecting something you still use, establish how you will sign in to that service afterward. Follow its documented account process rather than accidentally losing access to information you need. Revocation concerns future authorized use; information already received by another service can require a separate deletion request under that service’s process. Do not assume one removal button retrieves every past copy.
If a connected tool has unusually broad powers, such as publishing or managing a professional account, review whether those powers still fit its purpose. Protect the associated account and remove abandoned connections deliberately. Keep the review focused on actual permissions rather than judging safety from a familiar logo alone.
Read ad and personalization controls as data-use choices
Find ad preferences and the service’s explanation of information used for personalization. Separate controls about topics you see from controls about use of activity supplied by other businesses. Neither is the same as restricting your post audience. A less personalized advertisement does not establish that all data collection, measurement, or service processing has stopped.
Current names matter here. In June 2026, Meta announced expansion of “Activity from other businesses” and retirement of the separate “Your activity off Meta technologies” setting, with country rollouts. Use the current official explanation shown for your account rather than an old tutorial promising the same disconnected-activity control everywhere. Make the choice based on the described use and keep its limits visible.
Check centralized settings across the accounts they affect
Meta’s April 2026 Meta Account announcement describes a transition in how account settings are managed. Depending on rollout, you may encounter older Accounts Center wording or newer Meta Account wording. Confirm which linked accounts a choice affects before saving it. Centralized management can be convenient, but a preference applied to one profile should not be assumed to cover every separate account.
Protect account access and the route back in
Inspect the service’s password, additional-authentication, login-alert, and active-session options. Use unique credentials and a supported strong authentication method, and review unfamiliar sessions through the official process. Check that recovery contact details remain yours and are current. A privacy arrangement can be defeated by someone controlling the account that is allowed to change it.
Store recovery material securely in the way the service recommends and ensure you can recover if the usual phone is lost. Do not post backup codes into a chat for convenience. If an alert arrives unexpectedly, open the real app directly instead of following the message’s link. Check the underlying account activity before deciding whether the alert is genuine or what action it requires.
Finish with a visible verification and a manageable follow-up
Recheck a harmless post audience, public profile details, follower list, and the main choices you changed. For a fictional personal account, the result might be restricted future posts, removal of an obsolete follower, narrower contact suggestions, and reviewed app access. It should not be described as total anonymity. Record any unresolved setting you need to revisit through official help.
Repeat relevant parts when you add an account, change its public purpose, grant a new app connection, replace a phone, or encounter a material settings change. You do not need to revisit every menu every day. A deliberate review of the account’s audience, discovery, device permissions, data-use choices, and access is useful because each concerns a different exposure. Knowing those differences makes the next privacy prompt easier to judge.
One final comparison is especially useful for people with several profiles. If a photograph is restricted on a personal account but also published on a public portfolio, changing the personal audience does not restrict the portfolio copy. Review the account where the information is actually visible and decide whether both publications are intended. The same applies when a public biography links directly to a supposedly separate personal profile. A privacy review should follow the visible information and connections, rather than assume each account exists independently because it has a different username.
