Here’s How to Lock Down Your Facebook Privacy Settings—to the Extent Possible

Facebook has dominated the news headlines of late, but not for good reasons. There were the 50 million Facebook profiles gathered for Cambridge Analytica and used in the 2016 presidential election. Facebook has long been scraping call and text message data from Android phones. And within the Facebook iOS app, the company pushes the Onavo Protect VPN, an app made by a subsidiary that literally collects all your mobile data traffic for Facebook.

Because of this, many have encouraged Facebook users to delete their accounts. That even includes the billionaire co-founder of the WhatsApp messaging service, which Facebook bought in 2014. If you’re done with Facebook, you’re welcome to deactivate or even delete your account. Facebook provides instructions for both actions. Deactivating your account basically just makes you invisible on Facebook, whereas deleting your account may eventually (up to 3 months) result in most of the data being removed.

The problem is that Facebook is useful. It may be the only connection you have with certain friends or family members, and many informal groups use Facebook for meetup logistics. For many of us, losing access to Facebook would hurt our real-world relationships and activities. Plus, lots of companies have Facebook pages, and taking those down might result in a loss of business from customers who would find out about the firm only through Facebook. What to do?

If you’re a business, the most sensible tack is to keep your Facebook page but avoid relying on it. Remember, Facebook is not your friend. Earlier in 2018, Facebook announced that it would be prioritizing posts from friends and family over public content, which is a nice way of saying that Facebook is deprecating business-related posts. So make sure you have a Web site that you control, and make sure that customers can easily find it and contact you through it. It’s also a good idea to offer customers multiple ways to contact you, including via email.

On a personal level, there are two ways to think about privacy on Facebook: limiting the information you share with other people on Facebook, and limiting the information that you’re willing to provide to Facebook at all. If Facebook doesn’t have certain data about you, they can’t sell it to the highest bidder, let it be harvested by hackers, or use it in ways you might find creepy.

To control who on Facebook can see what you share, click the ? button on the Facebook Web site on your Mac, or tap the hamburger button in the bottom right corner of the Facebook iOS app and tap Privacy Shortcuts. Then click or tap Privacy Checkup and run through the steps to make sure you’re sharing the right info with the right people. Be sure to lock down or remove any apps that you don’t need, since they can leak all sorts of data.

Also, go to Facebook’s Privacy Settings & Tools page. Click the Edit button next to each item, and make it as specific as you can. You also might want to review the posts you’re tagged in and remove those that you don’t want on your timeline.

But what if you don’t want to give information to Facebook for it to use? Go to Facebook’s page for Uploading and Managing Your Contacts, and delete them all. You’re just giving away your contacts’ personal information without their permission otherwise.

To ensure that contact uploading doesn’t happen again, in the Facebook iOS app, tap the hamburger button, scroll to the bottom, and then tap Settings & Privacy > Account Settings > General > Upload Contacts and make sure the switch is off. (Some versions of the Facebook app just have Settings, not Settings & Privacy, and show a popover for Account Settings.)

Also, in the iPhone Facebook app, tap the hamburger button again and then Settings & Privacy > Account Settings > Location > Location, and make sure it’s set to Never. And whatever you do, keep Location History off—Facebook doesn’t need to know everywhere you’ve ever been.

If you’re perturbed by the way Facebook’s iOS app is trying to capture your contacts and locations, you could delete it from your iOS devices and rely instead on the Facebook Web site, which can’t access nearly as much information about you. To make it easier to open, in Safari, visit facebook.com, tap the Share button, and then tap the Add to Home Screen button in the bottom row of the share sheet.

Let us leave you with one thought. Always assume that anything you post to Facebook or allow Facebook to have access to could end up on the front page of your local newspaper… or the New York Times. Nothing on Facebook is ever completely private—Facebook has shown it isn’t trustworthy or reliable—and the best way to ensure confidential information doesn’t leak inadvertently is to avoid posting it to Facebook in the first place.

AI Usage Transparency Report

Pre-AI Era · Written before widespread use of generative AI tools

AI Signal Composition

Rep Tone Struct Instr
Repetition: 33%
Tone: 52%
Structure: 45%
List: 0%
Instructional: 37%
Emoji: 0%

Score: 0.05 · Low AI Influence

Summary

Facebook's data collection practices have raised concerns, but deleting the app may not be the best solution for everyone. Consider limiting the information you share and use Facebook's privacy settings to control who can see your posts.

Related Posts

Leaving Flickr: Migrating 20,000+ Photos to Synology and Taking Back Control

There’s a certain kind of friction you start to notice when you’ve been using a service for a long time. Not enough to make you leave immediately, but enough to make you pause. Flickr had been that kind of service for me. It quietly held years of photos, uploads from old phones, albums I hadn’t looked at in ages, and a massive "Auto Upload" collection that had grown into something I didn’t fully understand anymore.

Read more

How I Finally Passed the PMP Exam (After 12 Years of Waiting)

Back in 2013, I registered for a PMI membership with every intention of pursuing my PMP certification. I downloaded the handbook, bookmarked the eligibility requirements, and even told a few friends that I was going to do it "soon." At the time, I thought getting certified would be a straightforward process, but little did I know what lay ahead in terms of studying and preparation.

Read more

The Evolution of Apple Certification: A Journey Through Versions, Challenges & Growth

When I recently passed the Apple Certified Support Professional (ACSP) exam again, I paused to reflect — not just on this milestone, but on the long path I’ve walked through Apple’s certification landscape. My first certification dates back to macOS 10.5, and over the years, I’ve earned credentials across nearly every version since. In that time, the exams — and Apple itself — have transformed significantly.

Read more

Secure Software, Secure Career: How I Passed the CSSLP

After passing the CISSP earlier this year, I decided to follow it up with the **Certified Secure Software Lifecycle Professional (CSSLP)** certification. For those unfamiliar, CSSLP is an ISC2 certification that focuses specifically on secure software development practices across the full SDLC—from requirements and design to coding, testing, deployment, and maintenance. My goal in pursuing this certification was to further develop my skills in ensuring the security of software throughout its entire lifecycle.

Read more

Managing Bring Your Own Device (BYOD) for Android with Microsoft Intune

Alright, so today we're going to be talking about the management of bring your own device BYOD for Android devices. There's a lot of information out there for the management of iOS devices and you can do that with pretty much any Apple MDM on the market. We just happen to use Jamf where I work, but you could use anything from Braavos to SimpleMDM to Kanji or JumpCloud. Mosyle is also a great option.

Read more

BYO with me in 2025: iOS with User Enrollment in JAMF Pro

It really depends on your company's needs. For example, many companies need to hire 1099 contractors and in such a case they come with their own devices but not the correct security settings or enforcements. Remember BYOD is a security construct. The idea here is that you should be securing the company's sensitive data in all forms. This may involve implementing policies for contractor-owned devices, ensuring that all devices accessing company data meet minimum security standards, and regularly reviewing and updating these standards to stay ahead of emerging threats.

Read more

Securing BYOD Email Access: Exploring Strategies in Microsoft 365

In today’s mobile-first world, organizations increasingly rely on Bring Your Own Device (BYOD) programs to empower employees while optimizing costs. However, this flexibility introduces unique challenges, particularly around securing email access. To mitigate risks, we are implementing a comprehensive strategy to block email access on non-company devices by default and ensure only sanctioned apps can access organizational email accounts. This approach will help prevent unauthorized access and data breaches, aligning with our commitment to maintaining the security and integrity of company communications.

Read more

How I Conquered the CISSP Exam: 9 Months, Top Resources, and Proven Strategies

Passing the CISSP (Certified Information Systems Security Professional) exam is no small feat. It’s known for its breadth, depth, and ability to test not just your knowledge but your practical understanding of cybersecurity. After nine months of intense preparation, I’m thrilled to say I’ve joined the ranks of CISSP-certified professionals! Here's a detailed account of my experience, including the resources I used, some tips that helped me along the way, and what I learned from the process itself.

Read more

Get more out of scripting than you may expect

Expect is an extension to the Tcl scripting language written by Don Libes. The program automates interactions with programs that expose a text terminal interface. Expect, originally written in 1990 for the Unix platform, has since become available for Microsoft Windows and other systems. Its functionality allows users to interact with these programs through scripted commands, eliminating the need for manual input.

Read more