How to delete your digital footprint, and what you realistically cannot remove

By Michael Obraitis, Managing Partner, and Michael Dale, CEO · Published September 6, 2026 · Last reviewed September 2026 · ADAM Pulse Knowledge Base · Privacy and Security Series

Short answer

You almost certainly cannot delete yourself from the internet. You can substantially reduce what is exposed.

Chasing a single "delete me" button is what makes most attempts fail. What works is a sequence, run in order, and repeated:

The order matters. Deleting before downloading loses things you wanted. Opting out before finding means you miss most of it. Securing last means you spent hours on privacy while leaving an exposed password in place.

What a digital footprint actually is

It is everything associated with you that results from your accounts, devices, activity and interactions online. It divides usefully in two.

Active — what you deliberately published. Social profiles, LinkedIn, reviews, forum posts, photos, comments, a personal site.

Passive — what was generated as you used things. Search activity, location history, advertising identifiers, device information, site analytics, shopping behaviour, app activity, data broker profiles, and anything exposed in a breach.

That distinction is why most cleanups fall short: deleting your public posts addresses the active half and leaves the passive half untouched.

Can you completely delete it?

Usually not, and it is worth being precise about why. Information can persist in public records, news articles, government databases, archived pages, other people's posts and legitimate business records — none of which you control.

So the goal is not invisibility. It is removing what creates real risk. That risk is rarely a single fact. Someone attempting to impersonate you might take a full name from LinkedIn, an address from a people search site, relatives from a data broker, an old email address from a defunct account, and an employer from social media. Each is harmless alone. Assembled, they are a working profile.

This is the point where privacy stops being a preference and becomes security.

Stage 1 — FIND

You cannot remove what you do not know exists. This stage produces an inventory. Nothing gets deleted yet.

Search yourself the way a stranger would

Start with your full name in quotation marks, then add qualifiers:

• "First Last" on its own
• "First Last" + city
• "First Last" + employer
• "First Last" + email address
• "First Last" + phone number

Repeat for previous names and old usernames. Use more than one search engine — one engine is not the internet.

Then search your email addresses, phone numbers, usernames, current and previous addresses, and any business names, each in quotation marks.

Search images too. Pictures outlive the accounts and pages they came from, often by years.

For anything you find, record the website, the exact URL, what it exposes, a screenshot and the date. That record is your cleanup inventory, and your evidence if you need to escalate.

Find the accounts you have forgotten

Most people have far more accounts than they remember, and dormant accounts are the ones that turn up in breaches.

Search your email for the phrases services use at sign-up: Welcome, Verify your email, Confirm your account, Activate your account, Thanks for signing up, Reset your password, Your account.

Then review your password manager, saved browser passwords, Google and Apple connected accounts, apps on old phones, social-login connections, subscription emails and receipts.

List them before deleting anything. Deleting as you discover is how people lose access to something they still needed.

Check for breach exposure

Your footprint is not limited to what was published deliberately. Email addresses, passwords and account details get exposed in breaches you were never told about. Check the addresses you use against a reputable breach-notification service.

If an address appears in a breach, deleting the email account is the wrong response. Change any compromised or reused password, turn on multifactor authentication, review recovery information and active sessions, check connected applications, and watch for unusual activity. The breach already happened. The live exposure is the reused password, not the inbox.

Stage 2 — DOWNLOAD

Before you close anything, get out what you want to keep: photos, emails, documents, contacts, messages, videos, receipts, purchase records, creative work.

Most large platforms have an export tool. Google Takeout is the obvious one.

Run this stage even if you think you have nothing worth keeping. People routinely discover otherwise while reading the archive.

Stage 3 — DELETE

Sort before you delete

Do not work through the list at random. Put every account in one of four buckets:

The INVESTIGATE bucket matters more than it looks. An account you do not recognise is either something you forgot, or something someone else created.

Delete, do not deactivate

Where a service offers both, choose Delete Account, not Deactivate. Deactivation usually suspends the account while keeping the information. Deletion starts a removal process, subject to the service's own retention policy.

Read the confirmation screen. Many services have a grace period during which simply logging back in cancels the deletion — which is exactly what happens if you sign in a week later to check whether it worked.

Clean the accounts you are keeping

You do not have to delete an account to shrink its footprint. Go through old posts, public photos, old comments, unused profile fields, phone numbers, birthdays, addresses, location data, employment and relationship information, public friend lists, old biographies, public email addresses and connected apps.

One question decides each: does this need to be publicly visible? If not, remove it or restrict it.

Audit the big platforms

Google. Several separate controls, and clearing Chrome does not touch most of them: My Activity, Google Dashboard, Privacy Checkup, My Ad Center, Search Services History or Web & App Activity, YouTube History and Maps Timeline. The full mechanics are in what does Google know about you and how to delete your Google search history completely.

Facebook and Instagram. Profile information, old posts, photos, tagged photos, comments, likes, followers, location data, advertising preferences, connected apps, contact synchronisation and activity from outside the apps. Review the historical data, not just what your profile shows today.

WhatsApp. Worth treating separately, because messaging raises a different question. Review account information, profile visibility, group privacy, contacts, linked devices, cloud backups, location sharing, app permissions and blocked users. And keep two things distinct: message content and metadata about the account and its use. End-to-end encryption protects content in transit between participants. It does not mean no other information about the account exists — and a cloud backup may sit outside that protection entirely.

TikTok. Profile, videos, comments, likes, search and watch history, messages, followers, advertising settings, contacts and location permissions, connected apps. Download the account data rather than judging by the public profile.

Stage 4 — OPT OUT

This stage covers information other people control. It is the slowest part, and the one most guides skip.

Remove the source before the search result

This is the single most important idea in the whole process.

Google Search is an index, not a repository. Removing a result changes what Google shows; the information stays on the site that published it. Google states it plainly:

"Even if Google removes something from Google Search, it might still be on the internet. People might still find it through links, social media, or other search engines."

So the order is: remove it at the source first, then deal with the search result. Doing only the second is why people are surprised when the information resurfaces.

Request removal from Google Search

Where the source cannot be reached, Google will consider removing certain personally identifiable information from Search. The eligible categories, as Google lists them:

• Your address, phone number or email
• Social Security or tax ID numbers, and resident ID card numbers
• Bank account or credit card numbers
• Pictures of your signature or your ID
• Private records, such as medical records
• Confidential usernames and passwords

Google handles doxxing separately: removal is possible where content carries your personal information alongside explicit or implicit threats, or a significant amount of aggregated personal information.

Google also offers Results about you, which finds search results containing your contact details and lets you request removal. Google notes it is rolling out to users over 18 in certain markets, so availability varies.

Contact the sites directly

If you control the account, delete the information yourself. If not, look for a privacy contact, support channel, data deletion request form, site administrator or legal request process.

Be specific. Give the exact URL and name the information. "Please remove me from the internet" gets ignored; "please remove the home address published at this URL" gets actioned. Keep records of every request and response.

People search sites and data brokers

The terms overlap. A data broker collects, aggregates and distributes information about individuals. A people search site makes information searchable through a consumer-facing interface. Plenty of companies do both.

Either way the process is the same: find the profile, find the company's removal process, submit the request, and verify later that it actually went.

Search for your name plus your address, your name plus your phone number, and your name plus "people search". Profiles can carry your age, current and previous addresses, phone numbers, email addresses, likely relatives, associated people, property information and public records.

Each company has its own process, typically some combination of locating the profile, verifying identity, submitting a form, confirming by email, and returning to check.

Advertising personalisation

Review advertising controls on the platforms you use — Google, Meta, TikTok, Microsoft, Amazon, Apple. Turn off personalised advertising, restrict off-platform activity, reset advertising identifiers, limit app tracking and review inferred interests.

One caveat that catches people: turning off personalised ads does not delete the underlying activity. Personalisation controls and deletion controls are different things, and switching off the first leaves the second exactly where it was.

Old posts, forums and photos

Search your old usernames. People rediscover forums, gaming communities, blog comments, defunct social networks, review sites, question-and-answer sites and message boards. Delete the content or the account where you can; contact the administrator where you cannot. For content you wrote but cannot remove, check whether you can edit it to strip the personal details.

Then check your photos, which expose more than faces: your home, street signs, licence plates, workplace, children's schools, travel patterns, documents, screens, badges, QR codes, mail, house numbers and location metadata.

Stage 5 — SECURE

A privacy cleanup without account security is half a job. For every account you kept: unique passwords, a password manager, multifactor authentication, and phishing-resistant methods where they are offered. Then review recovery email addresses and phone numbers, remove old devices, review active sessions, and remove applications you do not recognise.

Remove third-party app access

Connected services accumulate against Google, Facebook, Apple, Microsoft and LinkedIn accounts over years. Remove anything you no longer use, do not recognise, no longer trust or do not remember authorising. Every unnecessary connection is another route by which information moves, or an account gets reached.

Review permissions on your phone

Deleting information online while dozens of apps keep live access to more of it works against the whole exercise. Review location, microphone, camera, contacts, photos, Bluetooth, local network, notifications, tracking and background activity.

For each one: does this app genuinely need this permission for the thing I actually use it for? If not, revoke it.

Review your location footprint

Location deserves its own pass, because it comes from more places than people expect: Maps Timeline, Apple location settings, social media location permissions, photo metadata, fitness apps, weather apps, ride-sharing, family tracking, vehicle apps, retail apps and browser permissions.

Turning off one location history feature does not disable the others.

Stage 6 — MONITOR

Cleanup is not an event. Information reappears — a broker reacquires it, another site republishes it, a search engine indexes a different copy, someone reposts it, a public record stays available, a new breach lands, or you simply create new accounts.

Repeat the FIND searches periodically for your name, email, phone number, address, usernames and images. Re-check the brokers you opted out of. Review privacy settings on the accounts that matter.

Stop creating the problem

The cheapest privacy improvement is not publishing the information in the first place. Before handing over a birthdate, phone number, address, location, employer, family relationship, travel plan or personal email address, ask whether the service actually needs it.

The easiest piece of personal information to remove is the one you never shared.

What should I delete first?

Prioritise anything that enables identity theft, account takeover, doxxing, social engineering, financial fraud or a physical security risk:

1. Exposed passwords
2. Government identifiers
3. Financial information
4. Home address
5. Personal phone number
6. Personal email address
7. Sensitive documents

Then work outward to historical content and personalisation data, which matter less and take longer.

How long does this take?

There is no universal answer. A basic pass is a few hours. Someone with decades of accounts, public records and broker exposure should expect considerably longer, because some requests involve identity verification, waiting periods, manual review, repeated opt-outs, search reindexing, or chasing a site administrator who may never reply.

Work the priority list above rather than starting at the top of the alphabet.

What does not work

Three things are routinely mistaken for footprint removal.

A VPN. It changes how traffic is routed and has real uses. It retroactively deletes nothing — not Google activity, social posts, old accounts, broker profiles, search results, public records, breached passwords, photos or existing advertising profiles. It is a network privacy tool, not a deletion tool.

Incognito mode. It changes what the browser keeps locally after the session. It does not erase anything from sites you visited, accounts you signed into, your employer's systems, network security tooling, or any profile that already exists. Where the line actually falls is in what does Incognito mode actually hide.

Deleting a social account. Policies vary. Information may persist during processing and in backups, some is retained for security or legal reasons, and anything other people copied is outside your control. Read the platform's current deletion and retention policy before assuming the account takes everything with it.

The checklist

FIND — name, email addresses, phone numbers, usernames, addresses, images; old accounts; people search profiles; data brokers; breach exposure.

DOWNLOAD — account exports, photos and videos, documents, important emails, contacts, financial and purchase records.

DELETE — unused accounts, unnecessary posts, old photos, account history, unnecessary profile fields, unused applications.

OPT OUT — people search opt-outs, data broker requests, eligible Google Search removals, website owners contacted, advertising personalisation reviewed, unnecessary data sharing limited.

SECURE — exposed passwords changed, password reuse eliminated, multifactor authentication enabled, connected apps reviewed, active sessions reviewed, old devices removed, app permissions reviewed, recovery methods reviewed.

MONITOR — periodic searches for name, email and phone; brokers and people search sites re-checked; security alerts monitored; privacy settings reviewed; new breach exposure checked.

The bottom line

You probably cannot delete yourself from the internet. You can dramatically reduce what is exposed, and you can make what remains far harder to assemble into anything useful against you.

Find what exists. Download what you want. Delete what you do not need. Opt out where someone else holds it. Secure what you keep. Then check again in six months, because it moves.

Privacy is not a button. It is knowing where your information lives, and deciding deliberately what deserves to stay there.

Frequently asked questions

Related articles

• How to remove personal information from Google Search, and what "approved" actually means — the Google-side removal: what qualifies, which mechanism to use, and why an approved request may only cover searches of your name.
• How to remove yourself from data brokers and people search sites, and make it stick — Stage 4 in full: the ten-step opt-out process, California DROP, and why listings come back.
• What does Google know about you, and how do you actually find out? — the Google audit in Stage 3, in full.
• How to delete your Google search history completely — the step-by-step mechanics for every Google history control.
• What does Incognito mode actually hide, and who can still see your browsing? — why private browsing is not footprint removal.
• Sign in with Google: when one account becomes a single point of failure — the connected-app audit in Stage 5, and what happens if you lose the account holding everything.
• Utiq: how telecom-operator tracking identifies a connection rather than a cookie — tracking that happens at the carrier, where none of these controls reach.

References

Platform behaviour is checked against each platform's own documentation rather than secondary coverage, because these controls change and most guides on this subject describe an older interface. Links verified 6 September 2026. Where this guide gives a recommendation rather than a documented platform behaviour, it says so.

1. Google Search Help — Remove your personal information from Google— source for the eligible categories of personally identifiable information Google will consider removing from Search, for the separate treatment of doxxing content, and for Google's statement that removal from Search does not remove content from the internet.
2. Google Search Help — Results about you— source for the Results about you tool, what it surfaces, and Google's note that it is rolling out to users over 18 in certain markets.
3. Google Account Help — Download your data— source for Google Takeout and for the statement that downloading your data does not delete it from Google's servers.
4. Google — How Google retains data we collect— source for the two-stage deletion process and the circumstances in which information is retained longer, including security, fraud prevention, legal obligations and financial record-keeping.
5. Google Privacy Policy— source for the categories of information collected, including the several distinct sources of location-related information.
6. Google Account Help — Access & control activity in your account— source for My Activity, the Other activity section, and the statement that not all data saved to an account appears in My Activity.
7. Google Maps Help — Manage your Timeline— source for Timeline as the successor to Location History, and how it is stored and controlled.
8. Google Search Help — Find & control your Web & App Activity— source for what Web & App Activity governs, including Chrome history and activity from sites and apps that use Google services.