I used to think of my social media profiles as digital diaries, carefully curated snapshots of my life, mostly for friends and family. My Facebook page, for instance, was a repository of vacation photos from the summer of 2018 in the Scottish Highlands, a particularly memorable trip filled with misty mornings and challenging hikes. I also shared birthday celebrations, graduations, and even the occasional philosophical musing. I certainly didn’t consider it a trove of sensitive information. My Instagram, similarly, was a visual diary, showcasing my artwork and snippets of my daily routine, peppered with location tags for my favourite local coffee shops.
The wake-up call came not with a dramatic data breach splashed across the news, but with a much more personal, almost mundane, realization. It was late 2021, and I was applying for a new apartment. The landlord, a rather thorough individual named Mr. Henderson, requested references. One of the requirements was to provide social media links for a "background check." At first, I balked. It felt intrusive. But the rental market in my city was notoriously competitive, and I needed this place. So, with a sigh, I linked my LinkedIn, my personal Facebook, and my public Instagram.
A few days later, Mr. Henderson called. He wasn't outright accusatory, but his tone was unsettling. "I noticed you have a lot of photos tagging specific locations," he began, and then listed three of my favourite, but not widely known, hiking trails near my parents' rural home. He continued, "And your Facebook album from 2019, the one with your sister's wedding? There are quite a few people tagged there, some with full names and their employers visible." He paused, letting the implication hang in the air. He hadn't hacked me; he had simply used the public-facing information I had willingly, albeit carelessly, provided.
This incident forced me to re-examine my digital footprint. I’d assumed that because I had privacy settings on Facebook, my data was largely protected. But I hadn't considered the ripple effects of tagged photos, location stamps, and the information shared by my friends who did have more public profiles. My "private" photos from that Scottish trip, for example, were tagged with specific locations that, when combined with other public posts, could paint a surprisingly detailed picture of my habits and connections. Even the seemingly innocent check-ins at local businesses could, if aggregated, suggest patterns of movement.
It wasn't just about what I posted. It was about how the platforms themselves organized and, potentially, utilized this data. I started reading more about how social media companies aggregate user data, not just for targeted advertising, but for broader market research and analysis. The idea that my casual posts about enjoying a particular brand of artisanal cheese or attending a local music festival could be contributing to a larger profile of my consumer habits felt unnerving. The platforms weren't just passive archives; they were active collectors, and I had been an unwitting contributor.
The most jarring realization was how easily my data could be pieced together. Mr. Henderson didn't need sophisticated hacking skills. He just needed a few clicks. My full name, my approximate age (gleaned from birthday posts), my general location (from check-ins and tagged photos), and my employment history (from LinkedIn and occasionally mentioned on Facebook) were all out there. It was a stark reminder that the lines between "public" and "private" online are often far blurrier than we assume, and that the information we share, even with the best intentions, can be leveraged in ways we never anticipated. My apartment application became a catalyst for a much-needed digital declutter and a lifelong awareness of the privacy implications of every click and every post.