How to Protect Your Personal Information When Signing Up for Apps and Websites

Read what permissions are actually being requested — before installing

Before downloading, check what the app requests access to (visible on the app store listing itself). A flashlight app asking for contacts access, or a simple game asking for precise location, is a signal worth pausing on — permissions should roughly match what the app actually needs to function.

Use a separate email for sign-ups you don't fully trust

Keep one email reserved for banking, work, and genuinely important accounts. Use a second, separate email for everything else — app sign-ups, one-time forms, newsletters, contests. If the second one ever ends up in a broker list or breach, it doesn't touch anything that actually matters.

Avoid using your primary phone number for low-stakes sign-ups

Same logic as above — if you have access to a secondary number (a second SIM, or a service that provides one), use it for sign-ups, giveaways, and "quick verification" forms at store counters. Reserve your primary number for banking, close contacts, and services where you genuinely need reliable, long-term reachability.

Skip optional fields

Most sign-up forms include fields marked optional — date of birth, gender, secondary contact — that aren't required for the account to function. Every optional field filled in is more data attached to your profile than the service strictly needed, and more that's at risk if that company is ever breached. Leave optional fields blank by default.

Decline social login when privacy matters more than convenience

"Sign in with Google/Facebook" is fast, but it also links that new account to your existing social profile and can grant it access to profile data by default. For accounts where you'd rather keep things separate, a dedicated email and password — even if slightly less convenient — keeps that account from being directly tied to your main identity.

Check the privacy policy for one specific thing: sharing with "partners"

You don't need to read the whole document — search (Ctrl+F) for "third parties," "partners," or "share" to see specifically whether your data gets passed along to other companies. This single check surfaces the difference between an app that keeps your data contained and one that treats it as a resalable asset from day one.

Delete accounts you're not going to keep using — don't just uninstall

If you're trying an app and decide it's not for you, take the extra step of deleting the account (not just uninstalling), so the sign-up doesn't sit indefinitely as a forgotten data point. This is far easier to do immediately than to track down months or years later.

Build this into a habit, not a one-time effort

None of these steps require much extra time at the point of sign-up — a few seconds of checking permissions, choosing which email to use, and skipping optional fields. The value compounds: fewer accounts holding your real, primary details means less to clean up later, and less exposure if any one of those services is eventually breached.

What this doesn't undo

These habits protect what you sign up for going forward — they don't address the accounts and exposure that already exist from years of prior sign-ups before you started being careful. For that layer, a periodic check across breach and broker sources fills the gap. Scan My Shadow checks your phone number and email across 1,500+ sources, covering exactly the accumulated exposure that prevention alone can't undo retroactively.

Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.