Privacy
Hospitals Told Facebook Your Appointment
In 2022, The Markup found 33 of 100 hospital websites sent appointment details to Facebook via Meta Pixel. Learn what was shared and how to disconnect.
undoleak blog
Guides to finding and removing your leaked data
Plain-English guides on removing your personal info from people-search sites, finding leaked photos, and what to do after a data breach.
All guides
Privacy
Does ChatGPT Train on Your Chats?
On personal ChatGPT Free, Plus, and Pro, data sharing is on by default. Learn what's used for training, what's protected, and how to opt out.
Data breaches
Docomo Leaked ID Numbers for Up to 294,839 Lines: What To Do
NTT Docomo reported ID document numbers leaked for up to 294,839 phone lines. Here's what was exposed, who's affected, and how to protect yourself.
Privacy
Which Apps Can Read Your Gmail? Remove Access
See which apps can access your Gmail, understand the 2018 reporting, and remove unwanted connections from your Google Account.
Security updates
Windows Update Won't Fix This Paint Flaw (CVE-2026-83844)
CVE-2026-83844 is a remote-code flaw in Windows Paint rated Important by Microsoft. The fix is only available through the Store, not Windows Update.
Privacy
Family Safety App Sold Location Data on Tens of Millions of Users
A 2021 investigation found the family tracking app sold precise GPS to about a dozen data brokers. Its 2026 policy still permits data sales.
Privacy
Apple Will Check Public iCloud Links in iOS 27.3: What Changes and How to Share Privately
Starting in iOS 27.3, iCloud items shared with 'Anyone with the link' will be checked by Apple and aren't end-to-end encrypted. How to share privately.
Privacy
Your License Plate Is in a Police Network: How Flock ALPR Cameras Work, and How to Check for Ones Near You
Flock scans 20 billion plates per month. 75% of agencies share without warrants. Find cameras near you and erase your address from people-search sites.
Data breaches
MUJI Card Numbers Leaked: What Was Exposed and What to Do
MUJI operator Ryohin Keikaku reported full MUJI Card numbers for 1.09 million members may have been accessed. Here's what was leaked and what to do.
Privacy
Is Alexa Always Listening? What It Records and Keeps
Amazon says Alexa listens for its wake word on the device. Recordings and transcripts are saved by default. Four settings fix most of it.
Privacy
Your Wi-Fi Router Is on Apple's Map: How Wi-Fi Location Works, and How to Opt Out with _nomap
Your Wi-Fi router can reveal your precise location through Apple's and Google's positioning systems. Learn how _nomap works and how to opt out.
Data breaches
Applebee's App Exposed Customer Data: What Was Open and What to Do
A hardcoded password in the Applebee's app exposed customer names, birthdays, emails, and phone numbers. What to do if you have an account.
Photos
Can Your Photos Show Where You Are? How Photo Location Data Works, and How to Remove It
How phone photos save GPS coordinates in hidden metadata, what happened when photo location data exposed a hiding millionaire, and steps to turn it off.
Phishing
Frontier Airlines Scam Emails With Your Real Booking: What They Want and What to Do
Frontier passengers report phishing emails with real confirmation numbers and flight details. What the emails ask for and what to do if you got one.
Privacy
Can Strava Show Where You Live? What the Heatmap and StravaLeaks Revealed, and How to Hide Your Home
The 2018 heatmap revealed military bases. StravaLeaks tracked Secret Service to Biden's hotel. How to hide your home with Map Visibility.
Privacy
Flock Cameras: What They Record and Who Can Search It
Flock cameras log your plate, make, color, time and place. Police share searches. Find cameras near you and erase the link to your home.
Phishing
Real Google Security Alert, Fake Bill: The App Password Scam and How to Check Your Account
Scammers trick Google into sending genuine security alerts with fake bills. Learn how the app password scam works and how to check your account.
Privacy
Can Tesla Employees See Your Car Camera Videos? What Reuters Found and the Settings to Check
Reuters found Tesla staff shared videos from customers' car cameras in 2019-2022. Here's what happened and the Data Sharing settings to check.
Privacy
Discord Messages on Google: What's Changing and How to Turn It Off
Discord public server messages will appear in Google search from mid-December 2026. Learn what's changing, who's affected, and how to turn it off now.
Privacy
Does Google Track You With Tracking Turned Off? Location History, Web & App Activity and the Settings to Change
Google tracked users even with Location History off. Learn about the 2025 $425M verdict and how to turn off Web & App Activity to stop location tracking.
Data breaches
Binance Hack 2026: $6.3 Billion Stolen, and the Scam Messages That Come Next
Binance says a compromised laptop led to $6.3 billion stolen. User funds are safe. Watch out for fake support and recovery scams.
Facebook
How Does Facebook Know Who You Know? People You May Know, Uploaded Contacts and the Setting to Change
Facebook's People You May Know uses contacts others uploaded. Here's why you see people you never added and how to stop contact-based suggestions.
Privacy
Private Wi-Fi Address: How Free Wi-Fi and Stores Can Track Your Phone (and How to Stop It)
Free Wi-Fi and stores can track your phone through its MAC address. Learn how to turn on private Wi-Fi address (rotating or fixed) on iPhone and Android.
People-search sites
How to Remove Yourself From the Internet (2026 Checklist)
You can't delete yourself from the internet completely, but you can erase the parts that let strangers find you with this 7-step checklist.
Data breaches
Amadeus Data Breach 2026: Japan Airlines, ANA, Korean Air and Asiana Booking Data Exposed
Amadeus breach 2026: JAL, ANA, Korean Air and Asiana Airlines booking records accessed. 92,000 JAL customers. PNR codes, names, flights, some passports.
People-search sites
How to Remove Your Home Address From Google (and Where It Comes From)
Your home address is one search away. Here's how to hide it from Google Search with Results about you, and remove it from people-search sites for good.
Privacy
How to Opt Out of TSA Facial Recognition at the Airport
TSA facial recognition opt out: tell the officer before the camera. TSA says the photo is optional, deleted after a match, and you keep your place in line.
Data breaches
Have I Been Pwned? What to Do If You're Pwned
Have I Been Pwned found your email in a breach? What pwned means, what to do in the next 10 minutes, and what a password change cannot fix.
Data breaches
Coinbase Data Breach 2026: What the Amplitude Leak Exposed
Coinbase says it was not breached. Amplitude exposed a small subset of customer contact data. What leaked, and the phishing risk.
Photos
How to Opt Out of PimEyes (and Why One Photo Can Find You)
PimEyes opt out: upload a face photo and anonymized ID. Why one photo can find you, and what the 2024 smart glasses demo showed.
Data brokers
USPhoneBook Removal: Get Your Number Off It
Remove your number from USPhoneBook: free opt-out, the 24-hour email link trap, and why USPhoneBook says your listing can come back.
Privacy
Did BetterHelp Share Your Data With Facebook? What the FTC Found
Per the FTC, BetterHelp shared emails and therapy data with Facebook for ads. Learn how email lists and pixels work, and how to disconnect.
Data breaches
Sony So-net Data Breach: 2.58 Million Records Leaked, Including Ex-Members
Sony Network Communications disclosed that 2.58 million So-net and plala member records leaked, including 293,000 ex-members who had canceled.
Privacy
Is Your Phone Listening to You? What Researchers and the FTC Found
Northeastern researchers tested 17,000+ apps and found none listening. But the FTC said one service sold email lists, not voice data.
Privacy
How to Delete Alexa Recordings (and What Amazon Kept After You Did)
The FTC said Amazon kept transcripts after you deleted recordings. How to turn on "Don't save" in the Alexa app and delete saved voice history.
Identity theft
How to Freeze Your Credit (All 3 Bureaus + ChexSystems)
Freeze your credit free at Equifax, Experian and TransUnion plus ChexSystems. It's free, doesn't hurt your score and lasts until you lift it.
Account security
Unknown Child Account in PSN Family? What to Check Now
PlayStation players report unknown child accounts added to their PSN family. What to check, what Sony says, and how to secure your account.
Privacy
How to Delete Your Phone from a Rental Car
The FTC says rental cars can keep your texts, contacts, and call logs. Here's how to delete your phone before the next renter sees it.
Privacy
Does Kroger Sell Your Data? What Your Loyalty Card Really Collects
One Kroger shopper got his 62-page profile. It guessed his income and education. Almost all was wrong. What does your card track?
Spam calls
How to Stop Spam Calls (Fix the Source, Not the Number)
To stop spam calls, turn on your phone's spam filter, your carrier's free blocker, register at donotcall.gov, then fix the source by revoking consent and opting out of people-search sites.
Privacy
Your Deleted iPhone Photos May Not Be Gone. What's True (and the Fix)
Viral post hit 1.3M views: deleted iPhone photos aren't gone. What's true about thumbnails, what's overstated, and how to encrypt Mac backups.
Smart home
Can Ring Employees See My Videos?
The FTC says a Ring employee watched thousands of videos from at least 81 women's cameras in 2017. Turn on End-to-End Encryption in the Ring app.
Data brokers
LexisNexis Report Request: Your Car Could Be In It
Request your free LexisNexis consumer disclosure report (your car data could be in it), place a security freeze, and dispute errors.
Smart home
Can Robot Vacuums Take Pictures of You?
Test Roomba photos from 2020 went to Scale AI gig workers and private groups. Turn off Obstacle Image Review in the iRobot app.
People-search sites
How to Remove Your Phone Number From People-Search Sites
Your phone number is probably listed on people-search sites next to your name and address. Here's how to find those listings, opt out, and keep them off.
Privacy
Was Your 23andMe Data Leaked? How to Delete It
In 2023, hackers accessed 14,000 23andMe accounts via password reuse, then DNA Relatives exposed 6.9 million profiles. Learn how to delete your 23andMe data.
Privacy
How to Make Venmo Private: Stop Your Payments from Being Public
Venmo transactions are public by default. Learn how to change your Venmo privacy settings to Private and hide past payments from public view.
Data brokers
BeenVerified Opt Out (2026): One Form Isn't Enough
How to opt out of BeenVerified in 2026: the free form removes one record. Sister sites PeopleLooker, NeighborWho, Ownerly need separate requests.
Data breaches
Quest Diagnostics Data Breach: What to Do If Your Lab Records May Be Exposed
Quest Diagnostics found unauthorized access to the system doctors use to see lab results. Certain patient records were accessed. Here's what to do.
Privacy
Is My Period App Sharing My Data?
Per the FTC, Flo Health shared health data with Facebook and Google as app events. Learn how to check your period app's privacy labels and protect your data.
Privacy
Can Senders See If You Opened Their Email?
Email senders can see if you opened their message using tracking pixels. Learn how spy pixels work, what they reveal about you, and how to block them.
Privacy
Blur Your House on Google Maps: The 2026 Guide
How to blur your house on Google Maps Street View: the exact steps, the proof of address Google accepts, and what the blur still doesn't hide.
Data breaches
Capcom Data Breach: What to Do If You Have a CAPCOM ID
Hackers accessed 11,774,247 CAPCOM ID records. Email addresses and login data leaked. What to do about phishing and how to protect your account.
Privacy
How Did Target Know She Was Pregnant?
Target tracked purchases to predict pregnancies and send coupons. Learn how the retailer's Guest ID system worked and how to request your data.
Privacy
Are Apps Selling Your Location? How to Stop It
An FTC order bars X-Mode and Outlogic from selling sensitive location data after they tracked people to sensitive places.
Data brokers
Intelius Opt Out: One Form, Four Sites
The Intelius opt out is one free form at the PeopleConnect Suppression Center. It also works as your TruthFinder opt out, Instant Checkmate opt out and US Search opt out.
Spam calls
How Do Spam Callers Know My Name? How They Found You
When a robocall uses your name, it came from somewhere. Here's how spam callers find your number with your name attached, and how to erase that link.
Privacy
Is My Smart TV Spying on Me? What Smart TVs Track and How to Stop It
Smart TVs can capture your screen every 500ms and sell viewing data. What your TV tracks, who buys it, and how to turn off ACR on all brands.
Data breaches
SBI Data Breach: What to Do if Your Bank Records May Be Exposed
Hackers claim to be selling 375,000 SBI customer records with KYC forms and loan applications. SBI hasn't confirmed it. What to do if you're affected.
Data brokers
Is Your Car Tracking You for Insurance? The OnStar Data Sharing Case
GM's OnStar Smart Driver shared trip data with LexisNexis, who sold it to insurers. One driver's rate jumped 21%. Check your free report.
Data brokers
TruePeopleSearch Removal (2026): Erase Your Address
TruePeopleSearch shows your address to anyone who types your name. Here's the 2026 removal process, the traps where removals fail, and why listings come back.
Data brokers
Data Brokers Re-List You After You Opt Out (Here's How to Stop It)
You opted out and your listing came back. Here's why data brokers re-list you, the five ways it happens, and how to make an opt-out stick with California DROP.
Data brokers
How Scammers Know Your Mom's Name (And Use Data Brokers to Target You)
How scammers use people-search sites to run fake-relative calls, phishing messages that know your address, and worse. What they see, and how to erase it.
People-search sites
How to Remove Your Personal Information From the Internet (Complete 2026 Guide)
Free step-by-step guide: remove your address from Google, opt out of Whitepages, Spokeo, BeenVerified and 12 more sites, and use California DROP.
Data brokers
What Data Brokers Know About You (and Where They Get It)
What's in a data broker file: contact details, relatives, purchases, inferred traits and location. Where it comes from, and how to cut it.
Action plans
How to Delete Yourself From the Internet: A 30-Day Plan
A realistic day-by-day plan to delete yourself from the internet in 30 days at 20 to 40 minutes a day: accounts, people-search sites, Google, upkeep.
Privacy laws
California DROP: How to File and What Happens Next
A plain-English walkthrough of California's free DROP data broker deletion tool: who can file, what to enter, what each status means, and the timeline.
News
Radaris Seized: What Daniel's Law Means for Your Data
Why radaris.com now shows a court notice, what the August 2026 Daniel's Law judgment does and doesn't do, and what to do if Radaris had your info.
Privacy laws
The TAKE IT DOWN Act Explained: Your 48-Hour Removal Rights
What the TAKE IT DOWN Act requires, who it covers, how to send a valid removal request, and what to do if a platform misses the 48-hour deadline.
Image abuse
AI Deepfake Nudes: How to Get Them Removed
A calm, step-by-step guide to getting AI-generated fake nude images taken down from platforms and Google, blocking re-uploads, and finding support.
Data breaches
Your Email Was in a Data Breach: What to Do Now
Found your email in a data breach? What it means, what to do in the first hour, first day and first week, and when to freeze your credit.
Photos
How to Find Out if Your Photos Are Online (and Remove Them)
How to reverse image search yourself with Google Lens, TinEye and Bing, what face-search sites can find, and how to get unwanted photos taken down.
Spam calls
Why Am I Getting So Many Spam Calls? (And How to Cut Them)
Why spam calls keep coming, how people-search sites and data brokers spread your number, and the steps that actually reduce calls and texts.
Safety
Moving After Stalking or Abuse: Keeping Your New Address Private
A survivor-centered guide to keeping a new address private: safety planning, Address Confidentiality Programs, mail, records, and people-search sites.