Most people understand, abstractly, that social media is a privacy issue. Fewer have sat down and looked at what their own feeds actually reveal. The exercise is unsettling. With nothing more than a public Instagram or LinkedIn, a moderately competent stranger can usually reconstruct your daily route, your gym, your kids’ school, your relationship status, your travel schedule, and the windows of time your house is likely empty.
This isn’t paranoid. It’s how open-source intelligence works, and it’s how stalkers, fraudsters, and burglars increasingly operate.
The aggregation problem
No single post is incriminating. The morning coffee photo is harmless. So is the dog walk, the Peloton screenshot, the weekend trip, the kid’s first day of school, and the new car. Stack them together over six months and they form a precise behavioral fingerprint: weekday wake time, gym brand and approximate location, neighborhood landmarks, child’s age and school district, vacation timing, vehicle model and partial plate. Investigators call this aggregation, and the human brain is bad at sensing it because we evaluate posts one at a time. Platforms don’t help — they’re designed to encourage volume, not retrospection. Almost nobody scrolls back through their own feed asking what someone could learn.
Who’s actually looking
The audience for your posts isn’t just your followers. It includes ex-partners, business adversaries, opportunistic burglars who scrape geotagged content, fraudsters building convincing impersonation profiles, and increasingly, AI-driven scrapers feeding aggregated dossiers into commercial people-search databases. Domestic violence advocates have warned for years that abuse survivors are routinely located through innocuous social posts — a coffee shop tag here, a kid’s school logo there. Burglars working coordinated rings monitor real-estate Zillow listings and recent vacation posts in tandem. The point isn’t that everyone watching has bad intentions. It’s that you have no way to filter the audience by intention, and the platform’s defaults assume you don’t need to.
Practical hygiene without going dark
You don’t have to delete your accounts to close the worst gaps. Turn off location metadata on photos. Post travel content after you return, not during. Avoid identifiable school logos, house numbers, and routine geotags. Audit who can see your follower list and tagged photos, and consider that “friends only” means little once a friend’s account is compromised. Be especially careful with kids’ images, which can persist for decades and feed image databases you’ll never have visibility into. None of this requires becoming a hermit; it requires noticing that posts you treat as ephemeral are, in aggregate, a behavioral map you’ve published.
Bottom line
Social media isn’t uniquely evil, but it is uniquely effective at producing the kind of behavioral data that used to require professional surveillance. The defaults are tuned for the platform’s interests, not yours, and the people most likely to misuse what you post don’t announce themselves. A few small habits — delayed posting, stripped metadata, tighter privacy settings — close most of the easy doors. The exposed habits are usually the ones we never thought of as data.
Leave a Reply