Reclaiming Your Digital Privacy: How to Limit Corporate Tracking on Your Smartphone
We often hear the adage, “If you have nothing to hide, you have nothing to fear.” However, this doesn’t mean we should passively accept that corporations—not just tech giants—know everything about us, including how we use our smartphones. While the most effective solution might seem to be living without apps entirely, the realities of modern life rarely allow for such radical measures.
How to Make It Harder for Corporations, Not Yourself
The profiling of user activity by corporations can take many forms. Most commonly, it involves recording our preferences, the time spent within applications, and our general habits. This information is then used to display advertisements tailored to our profiles. Fortunately, there are several straightforward ways you can make it more challenging for these entities to collect data about you without significantly impacting your own convenience.
1. Create a “Burner” Email Address
This is one of the best steps you can take for your digital hygiene and to complicate data collection. A secondary email address, ideally one that doesn’t contain your initials, surname, or other easily identifiable information, allows you to effortlessly access promotions or services you don’t necessarily want linked to your main account.
A good example is signing up for loyalty programs or discounts. Imagine a jewelry chain offering a 5% discount for signing up via their app; this small saving can still be significant. By using a “burner” email, your primary inbox won’t suddenly be flooded with jewelry-related profiling data. Promotional emails will go to an address you only check when you intend to clear out spam or access specific offers. Consider using a pseudonym and avoiding providing your phone number where it’s not strictly necessary, as phone numbers are often tied to real-world identities due to registration requirements, even for prepaid services. For more insights into broader privacy concerns, you might find this article useful: Meta and Instagram Encryption Removal: Privacy Concerns.
2. Delete Unused Accounts and Smartphone Applications
We rarely think about it, but most online services allow for efficient account deletion. If you haven’t used a particular service for, say, two years, there’s a strong chance you never will again. In such cases, it’s wise to delete both the account and its associated application.
This safeguards you against potential problems. A data breach from a dormant account could open doors for hackers to access your other services, especially if you’ve reused passwords (which is strongly discouraged). If you’re not already using a strong password manager and two-factor authentication (2FA) methods like Google Authenticator, it’s highly recommended to consider them.
It’s also important to remember that, as citizens of the European Union, you have the right to request the deletion of your data from any private online service. This is defined by Article 17 of the GDPR (General Data Protection Regulation), also known as the “right to be forgotten.” When you exercise this right, the data controller should respond without undue delay, and at the latest, within one month. If the request is complex (e.g., they hold a lot of information about you), they can extend this period by another two months, but they must inform you of this extension and the reasons for the delay before the initial one-month period expires.
Even if you’re not actively using abandoned accounts, the marketing data they contain can often be combined with other databases, perhaps through data sales. Therefore, it’s prudent to delete accounts on websites you haven’t visited in a long time.
The situation is similar with apps. The only absolutely certain way to revoke an app’s permissions on your smartphone is to uninstall it. Why allow a potentially intrusive program to run automatically and, for example, track your location when you’re not using it? For more tips on managing smartphone permissions, check out: Preventing Smartphone Listening: Microphone Privacy Tips.
3. Reset Your Smartphone’s Advertising ID
Every Android smartphone has an advertising ID. This unique identifier allows marketers to link your device to specific purchases and services. It’s a good idea to reset it if you genuinely want to make it harder for international corporations to build a comprehensive profile of you.
To do this on most Android devices (steps may vary slightly by manufacturer and Android version):
- Open your device’s Settings.
- Navigate to the Privacy section.
- Look for Advanced settings or a similar option if not directly visible.
- Find and select Ads or Google > Ads.
- Tap on Reset advertising ID or Delete advertising ID (you might need to confirm twice).
It’s important to remember that each individual application might also have its own personalized ad settings that you should review and adjust as well.
Frequently Asked Questions (FAQ)
A “burner email” is a secondary email address used for registrations, newsletters, or promotions that you don’t want linked to your primary personal identity. It’s useful because it helps prevent your main inbox from being flooded with spam, reduces the amount of data collected about you under your real identity, and offers a layer of protection against targeted advertising and potential data breaches.
It’s recommended to conduct a digital “spring cleaning” at least once a year. Review all your online accounts and smartphone apps. If you haven’t used an account or app in over a year or two, and you don’t foresee needing it, consider deleting it. This practice minimizes your digital footprint and reduces potential security risks.
Resetting your advertising ID significantly limits personalized ad tracking by disassociating your device from past browsing and app usage data used for ad targeting. However, it does not stop all forms of tracking. Websites still use cookies, and some apps may use other identifiers or aggregate data. It’s one important step in a broader privacy strategy, alongside managing app permissions and browser settings.
The “Right to be Forgotten,” enshrined in Article 17 of the GDPR, allows individuals within the EU (and some other regions with similar laws) to request the deletion of their personal data from data controllers under certain circumstances (e.g., data is no longer necessary, consent is withdrawn, or data was unlawfully processed). To exercise it, you typically send a formal request to the organization holding your data. They are generally required to respond within one month.
Keeping old, unused online accounts poses several risks. Firstly, they are prime targets for data breaches, and if you’ve reused passwords, these breaches can compromise your active accounts. Secondly, even dormant accounts often contain personal and marketing data that can be sold, aggregated, or used to build a more comprehensive profile of you without your knowledge. Deleting them reduces your digital footprint and minimizes these vulnerabilities.
Source: Self-developed content. Opening photo: Gemini