The 2026 Personal Privacy Checklist: Phone, Email, Car, Cloud, and Data Brokers

#The goal is not invisibility

Perfect privacy is fantasy for most people. You have a job, a phone, a bank account, a car, a home address, cloud accounts, and friends who upload contacts without asking you.

The goal is smaller: make the easy paths fail.

If someone searches your name, they should not get your current address in ten seconds. If they search your phone number, they should not get your relatives. If your email leaks, it should not unlock your whole life.

#Week one checklist

Do these first.

• Search your name, phone number, address, and email.
• Remove the worst people search profiles.
• Turn on app based MFA for email, banking, and password manager.
• Move SMS codes away from important accounts where possible.
• Export Google Takeout and check what is actually stored.
• Check Apple iCloud backups and device list.
• Freeze credit at the three major bureaus.
• Add a carrier port freeze or number lock.
• Remove old OAuth apps from Google, Microsoft, GitHub, and Facebook.
• Stop using your real phone number on low trust forms.

This is the privacy equivalent of locking the doors before debating camera placement.

#Phone number

Your phone number is an identity key. Treat it like one.

Risk paths:

• SIM swap
• password reset abuse
• reverse phone lookup
• contact list uploads
• data broker matching
• political donation databases
• delivery apps and loyalty programs

Use a second number for junk forms. Keep your real number for banks, family, work, and accounts that truly need it.

If your carrier supports number lock, turn it on. If they support a port out PIN, set it. If they still allow account changes through weak phone support, assume the number can be attacked.

#Email

Use at least three email identities.

• One for banking and core accounts
• One for work and public contact
• One for shopping, signups, and low trust forms

Do not use the same email everywhere. Breach data becomes much more useful when one address maps to every service you use.

Check forwarding rules once a quarter. Attackers love inbox rules because victims miss them.

#Cloud accounts

Google, Apple, and Microsoft hold more personal data than most people think.

Check:

• logged in devices
• backup devices
• recovery emails
• recovery phone numbers
• OAuth apps
• location history
• photo backup
• file sharing links
• family sharing
• old app passwords

If an old phone, tablet, browser, or app still has access, remove it.

#Car data

Modern cars collect location, driving behavior, diagnostics, paired phone data, and sometimes contact history.

Check your automaker account. Remove old paired devices. Turn off driving score programs unless you explicitly want them. Ask your insurer whether any app or dongle is feeding telematics into your rate.

If you bought a used car, factory reset the infotainment system. If you sold a car, remove it from the app.

#Browser and ad tracking

Install a blocker that still works. Use Firefox with uBlock Origin, Brave with shields, or DNS filtering through NextDNS or Pi-hole.

Chrome is not where privacy blocking is headed. Manifest V3 made sure of that.

Also clear old extensions. A browser extension with broad permissions is a surveillance tool with a logo.

#Data brokers

Run the removal pass every 90 days.

Focus on:

• FastPeopleSearch
• TruePeopleSearch
• Whitepages
• Spokeo
• BeenVerified
• Intelius
• Nuwber
• Radaris
• USPhoneBook

Then use a paid service only if you will not maintain the cycle yourself.

#Password manager

Use one. Do not make this complicated.

Good choices in 2026:

• 1Password
• Bitwarden
• Proton Pass

Turn on MFA. Store recovery codes offline. Do not keep the master password in a notes app or cloud document.

#The quarterly review

Put this on a calendar.

Every 90 days:

• Search your name and phone number.
• Check password manager health reports.
• Review OAuth apps.
• Review forwarding rules.
• Check devices logged into Google, Apple, Microsoft, GitHub, and banking.
• Look for new broker profiles.
• Remove apps you no longer use.

Privacy is maintenance. Annoying, but manageable.