A Plain Guide to Social Media Privacy

Privacy is a set of layers, not one switch

When people say a post is “private,” they usually mean one specific thing: that strangers cannot read it. But information on a social network moves through several layers, and each one has different viewers and different controls. Thinking in layers makes the whole subject easier to manage.

The main layers are:

• Other users: friends, followers, group members and the public.
• The platform itself: the company that runs the service and stores what you post, send and do.
• Third parties: advertisers, partners, apps you connect, and services that process data on the platform’s behalf.
• Anyone who copies or forwards: people who take screenshots, save images or share your words elsewhere.

Settings mostly help with the first layer. The others depend on policies, laws and the choices of other people.

What other users can usually see

On most social networks, a profile has several parts that can be shown or hidden separately: your name and photo, a short bio, a friends or followers list, your posts, your tags and mentions, and sometimes your activity status or location. Defaults vary widely. Some services start with public profiles, others with limited ones, and defaults can change over time.

A few points are worth knowing in general:

• A public post can often be found by people who are not logged in, and sometimes through outside search engines.
• A post limited to a chosen audience is only as private as that audience. Anyone in it can copy, screenshot or repeat what you wrote.
• Content other people post about you, such as photos or tags, may follow their audience settings rather than yours.
• Comments on someone else’s post are usually visible to whoever can see that post.

What the platform itself can see

Even when other users cannot see something, the service generally can. Platforms typically keep the content you post, the accounts you follow, what you view or search for, the devices you use, and technical details such as approximate location from your network connection. Messages are a special case: some services use encryption so that only the participants can read them, while others can process message content on their servers. The difference matters, and it is covered in more detail when looking at what end-to-end encryption means in private chats.

Platforms usually explain their practices in a privacy policy. These are long, but the sections on what is collected, how long it is kept, who it is shared with, and how to delete it are worth skimming. For a broader look at why services gather this information, see how data collection and personalization work.

Third parties and advertising

Many free services are supported by advertising. That often means information about your interests and activity is used to decide which ads you see, a practice commonly described as audience targeting. Some services also let you control whether outside activity is used for this, or let you download or delete your data. Options differ by service and by where you live, since privacy laws vary.

Connected apps are another route. When you log in to another service using a social account, or grant an app permission to read your profile, that app may keep some of what it receives. Reviewing the list of connected apps occasionally and removing ones you no longer use is a simple habit.

What you control and what you do not

Things you generally can control:

• Who sees your posts, profile details and friends list.
• Who can tag you, message you or find you by email or phone number.
• Whether your location is attached to posts.
• Which apps and devices are logged in to your account.
• What you choose to post in the first place.

Things you generally cannot fully control:

• Screenshots and forwarding by people who can see your content.
• Information other people share about you.
• Content that was public for a while and was saved or indexed elsewhere.
• How a company handles data once it has been collected, beyond the options it offers.

This is why the most reliable privacy decision is usually the simplest: think before sharing something you would be uncomfortable seeing outside its intended audience.

A reasonable review routine

You do not need to become an expert. A short, repeated check works better than a one-time overhaul:

1. Look at your profile as a stranger would see it, using any “view as” or logged-out view the service offers.
2. Go through the privacy settings and audience controls one section at a time, covering posts, tags, messages and discoverability.
3. Review connected apps and active sessions.
4. Skim your older posts for details such as addresses, school or workplace names, travel plans or photos of documents.
5. Check how your account is protected, since a privacy setting means little if someone else can log in as you. A strong, unique password and a second login check are the basics.

Repeat this every few months, and again whenever a service announces changes, because platform changes can alter defaults without much notice.

Special situations

Some people have extra reasons to be careful: those who have faced harassment, people with safety concerns, public-facing professionals, and parents sharing about children. Photos and details about children deserve particular thought, as discussed in the guide to child photos. For organizations, the question also includes who inside the team holds the keys to a business account, which is a security matter as much as a privacy one.

None of this makes social media unsafe by nature. It means visibility is a choice you can make deliberately, with an understanding that the result is never perfectly controllable. If you have a specific safety concern, a local support organization or a qualified professional can give advice that general guidance cannot.