DeleteMe News – JoinDeleteMe https://joindeleteme.com Tue, 09 Sep 2025 18:13:49 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.2 Unmasking the “Privacy Paradox” with Vermont Attorney General Charity Clark https://joindeleteme.com/blog/privacy-paradox-with-vt-ag/ Tue, 09 Sep 2025 18:07:20 +0000 https://joindeleteme.com/?p=18123 Ever feel like your life is an open book that you didn’t write? In a digital marketplace where “post-privacy” is marketed as the new normal, it’s easy to feel like the battle for privacy is already lost. Vermont Attorney General Charity Clark doesn’t buy that for a minute, and she’s fighting to reclaim it as a fundamental right in her state. 

Clark is one the fiercest lawmakers in the nation when it comes to our collective digital dignity, and she joined us this week to talk about that. 

Why Your Data Matters

Attorney General Clark laid out two core reasons you should care about data privacy. First, it’s arguably a foundational right. The Constitution protects your reasonable expectation of privacy, which, again, arguably, includes the freedom from surveillance. The second reason is more practical. Whether we’re talking about health records or location history, your data is a goldmine for scammers and criminals.

Highlighting how our information is easily re-purposed in the commission of identity theft, scams, and extortion, Clark is not just floating some abstract idea: Our personal information makes us vulnerable. 

Swagger Eats Ethics for Breakfast

The conversation veered into some wild territory, starting with Attorney General Clark’s view of the current administration’s hiring practices. Focusing on a Trump Administration hire that wasn’t even Googled before being given access to highly sensitive data, Clark calls to question best practices. 

“The average person knows you don’t even go on a date with someone until you Google them,” she quipped. This “swagger,” as Clark calls it, is a dangerous component in the rapid evolution of technology like cryptocurrency and AI, where the drive for innovation and market dominance often eclipses ethical considerations. 

The disregard for privacy goes hand-in-love with the above tendency, extending to the bizarre world of meme coins and beyond. 

AI and Deepfakes

Clark thinks the biggest threat to our privacy may be the runaway train that is artificial intelligence. The technology is advancing so fast that it’s out-pacing legislation in a crony-driven  environment where a 10-year ban on state-level AI regulation was recently buried in a recent federal statute–and thankfully scuttled before that bill was signed into law. 

Clark pointed to Europe’s proactive “AI Act” as a potential model, noting that their historical and political experiences have fostered a greater emphasis on data privacy.

Under her leadership, Vermont is looking to expand revenge porn statutes to include AI-generated deepfakes. 

Enter the shadow of AI chatbots and romance scams, “the romance scam using AI chatbots is a deadly combination and it is coming,” Clark warned. “You know, the idea that I could literally be living my life, making a sandwich, doing whatever I want…[and] my evil AI bots could be romancing victims by the thousands.”

The Kids Aren’t Alright 

We also talked about the privacy of children. A significant privacy paradox is that parents consent to data collection through school-mandated educational technology (EdTech) apps.

“Violation of privacy has been so normalized that people think they’re being like a Karen if they say, ‘No, I don’t want that information shared about my kid,'” Clark pointed out. 

Collective Responsibility

Our privacy is at risk, and we’re all complicit. Through our online behavior and willingness to share information, we participate in the erosion of our own privacy. The couple caught on the Jumbotron at that Coldplay concert we talked about a few episodes ago provides a perfect example: they weren’t identified by a big corporation or the government, but by fellow citizens using publicly available data. We have all become participants in a culture of mutual surveillance.

Attorney General Clark is not without hope. She believes a shift in awareness is possible. She advocates for a society where individuals can experience freedom without ambient surveillance, where private companies are held to the same standards we expect of our government, and where “minding your own business” is not just a quaint Yankee notion but a protected right.

]]>
DeleteMe News - JoinDeleteMe nonadult
Ep 215: They Targeted His Mom, He Went Full CIA https://joindeleteme.com/blog/they-targeted-his-mom-he-went-full-cia/ Wed, 03 Sep 2025 15:13:44 +0000 https://joindeleteme.com/?p=18042 This week’s episode of “What the Hack?” explores the global rise of scams targeting older adults. Guest Ken Westbrook, a 33-year veteran of the CIA and founder of the Stop Scams Alliance, shares a personal story of a tech support scam that cost the bulk of his 83-year-old mother’s life savings. 

In the wake of this scam, Westbrook launched an executive-level investigation into the true scope of cybercrime worldwide, revealing that these “isolated events” are part of something much bigger—a national security crisis.

The New World War is Financial

According to Westbrook’s research, scams hit an estimated 21 million Americans annually with a staggering 57,000 people per day affected. These aren’t just small-time crimes. Transnational criminal syndicates operating from organized compounds in Southeast Asia are waging war on Americans. 

Westbrook related a story about a Chinese crime boss who was heard leading his workers in a chant: “Cripple the economies of the U.S. and Europe. This is World War III.” 

The sheer volume of attacks and the immense financial scale, pose a direct threat to the U.S. economy. 

Data from organizations like the FBI and FTC show that the losses, while often underreported, amount to billions of dollars annually. A recent study by the Common Sense Institute estimated that financial fraud in a single U.S. state, when both reported and unreported losses are considered, could result in billions of dollars in lost GDP and thousands of jobs. At a fundamental level, these losses could present a problem for governmental management of public resources and the maintenance of economic stability.

Also discussed in this episode: the ubiquitous “overdue toll” text message scam. While they seem like a minor annoyance, these SMishing attacks are part of a massive smishing scam linked to Chinese cybercriminals managing the more than 60,000 web domains used to send these texts.

Follow the money

The money pilfered in these attacks isn’t going into showy cars and watches, or at least not exclusively. According to Westbrook, the proceeds are also being used to fund serious global threats, including human trafficking and drug cartels producing fentanyl. In a recent episode we talked about the fact that as much as half of North Korea’s missile program is funded by cryptocurrency scams.

So why is this such an “American” problem? Westbrook believe the U.S. has become the “softest target” for these criminals because of lax government response. Unlike the UK and Australia, which have a centralized, national anti-cybercrime strategies (and have seen a decrease in fraud as a result), the U.S. response remains fragmented. He advocates for a systemic approach, including the appointment of a dedicated leader to coordinate efforts and 

What can you do? 

Turns out, there’s a lot you can do. By understanding the common red flags indicating cyber shenanigans—the sense of panic, the urgency, and unusual payment methods—we can protect ourselves. And then there are the proactive measures you can take, like using a data removal service like DeleteMe which may reduce your need to verify unexpected communications, click on fishy links or call numbers quick or else.

Westbrook has a vital wake-up call for us all: vigilance isn’t just about protecting your wallet; it’s about safeguarding your community and fighting back against a global threat by staying informed and sharing what you know about staying safe.

]]>
On Our Podcast This Week: nonadult
Everything You Need to Know About the 23andMe Bankruptcy and Your Privacy https://joindeleteme.com/blog/everything-you-need-to-know-about-the-23andme-bankruptcy-and-your-privacy/ Mon, 31 Mar 2025 18:10:25 +0000 https://joindeleteme.com/?p=17087

Table of Contents

On March 23rd, the genetic testing company 23andMe filed for Chapter 11 bankruptcy. This means that a lot of people’s genetic data is about to enter a legal grey zone. 

We recommend that if you are a 23andMe customer, you follow the California AG’s advice and delete your 23andMe account. 

California Attorney General consumer alert about 23andMe bankruptcy

Even if you are not a customer of 23andMe? You’re probably still affected by the bankruptcy of what was, until recently, one of the world’s largest biotech companies.

We’ve covered the data risks of using genetic testing companies like 23andMe before:

So, here’s what you need to know if you’re worried about your data (or the data of someone close to you). 

What’s Happening to the Genetic Data You Gave to 23andMe?

It’ll probably be sold to a new owner. When you shared your DNA with 23andMe, you effectively gave it to them.

Genetic data from over 15 million people worldwide is 23andMe’s core business asset. 

Just like what happens to any other business asset during bankruptcy, 23andMe’s cache of data is now highly likely to be sold to a new owner​ (as per 23andMe’s privacy policy). You don’t get any say in who this is. 

23andMe privacy policy: "If we are involved in a bankruptcy, merger, acquisition, reorganisation, or sale of assets, your Personal Information may be accessed, sold or transferred as part of that transaction."

Experts warn that DNA information isn’t just another data point but a “blueprint” of your biological identity, and its sale could have “far-reaching consequences.”​

23andMe said that its bankruptcy won’t affect how customer data is stored, managed, or protected. 

It also said it would look for a buyer who would share its commitment to customer data privacy. But you have to take their word for it. 

What Did 23andMe announce? - "Through the sale process, 23andMe will look to secure a partner who shares in its commitment to customer data privacy."

Considering that in 2023, the company disclosed a data breach that impacted 6.9 million customers, that’s not too reassuring. 

Any buyer of 23andMe would need to initially comply with 23andMe’s current privacy policy, but they could change the terms eventually. 

According to Sara Gerke, a professor at the University of Illinois College of Law, whoever buys 23andMe’s data could make significant changes to how they protect it. 

A buyer could change the policy to allow for the sharing of genetic data with some types of insurers, like long-term care or disability insurance companies. Data is unlikely to be shared directly with health insurers since that would be a violation of the federal nondiscrimination law called the Genetic Information Nondiscrimination Act (GINA).

Plus, as some legal experts have pointed out, whoever buys 23andMe’s data could take away the option to opt out of sharing. Hence why you should opt out now (see how below). 

Isn’t My Genetic Data Anonymized? 

Yes, according to 23andMe, customers’ genetic data is anonymized and stored separately from your other data (e.g., name, address, etc.) 

However, speaking to Al Jazeera, Arthur Caplan, the head of the Division of Medical Ethics at the NYU Grossman School of Medicine, said: 

“Given the fact that DNA analysis is even better now than it was 10 years ago when all this collection started, they might be able to identify people.”

The Electronic Frontier Foundation also said that genetic data can’t be truly de-identified: 

“Even if separated from obvious identifiers like name, it is still forever linked to only one person in the world. And at least one study has shown that, when combined with data from GenBank, a National Institutes of Health genetic sequence database, data from some genealogical databases can result in the possibility of re-identification.”  

“This Doesn’t Affect Me” 

You don’t even have to be a customer of 23andMe to be impacted. You just have to be related to one.  

As Professor Carissa Veliz, author of Privacy is Power said in a BBC article:

“If you gave your data to 23andMe, you also gave the genetic data of your parents, your siblings, your children, and even distant kin who did not consent to that.” 

The same is true in reverse. 

Even if you take your privacy extremely seriously and wouldn’t dream of handing over your most sensitive data to a company like 23andMe, chances are, someone you know (parents, siblings, children, uncles, etc.) has done exactly that. 

By sharing their data with 23andMe, they’ve also inadvertently shared some of your data, too.  

Meredith Whittaker X post about 23andMe bankruptcy and genetic data

Law enforcement can use these databases indirectly to identify suspects. Even if a suspect hasn’t submitted their own DNA, police might identify them through relatives who have shared their DNA. 

For example, the “Golden State Killer” was caught in 2018 when police used GEDmatch to link DNA from the crime scene to third cousins. 

That said, 23andMe does not provide law enforcement access to its database. 

In its transparency report, you can see that though authorities tried to get access to the genetic information of 15 people, the company did not produce this data. 

23andMe data sharing with the authorities transparency repot

Regardless, non-customers whose DNA is revealed through someone else’s test have very limited recourse. For example, you can’t log in to delete data. 

Genetic Data Protection Laws 

“Isn’t my genetic data protected legally?” 

The answer is complicated. 

At the federal level:

  • The Genetic Information Nondiscrimination Act applies to 23andMe genetic data, preventing insurers and employers from using genetic data to discriminate against you. 
  • However, the Health Insurance Portability and Accountability Act – the law that most people would think of in relation to genetic data – is not relevant since it applies to healthcare and not direct-to-consumer companies such as 23andMe. 

However, at the state level, many states do have laws that cover genetic testing and data

For example, California’s Genetic Information Nondiscrimination Act prohibits genetic discrimination in employment, housing, mortgage lending, education, and public accommodations.

According to the Electronic Frontier Foundation, about a dozen US states have consumer data privacy laws that are specific to genetic privacy. Most of these require 23andMe to get consent from consumers before transferring data to someone else in an acquisition scenario. 

Other states have comprehensive privacy laws that give consumers rights to access and delete their data (though there are no protections in cases of mergers, acquisitions, or bankruptcies). 

What To Do Now 

You should probably delete your 23andMe account and/or warn those close to you to do the same. 

If you are a customer of 23andMe, here is exactly what we would advise you to do:

Download your 23andMe data

If you did a 23andMe test, you might as well keep the results by downloading your data. 

Here’s how:

  1. Go to 23andMe and log into your account.
  2. Click your username.
  3. Click “Settings.”
  4. Scroll to ‘23andMe Data’ and click “View.” 
  5. Download the 23andMe data you want to keep. 

Delete Your 23andMe data and account

Despite what some people are saying, 23andMe is not preventing you from deleting your account

"Can customers still delete their data?"

If the 23andMe site doesn’t work when you attempt to delete your account (previously, there was such a rush to delete 23andMe accounts that the site crashed), you can contact 23andMe customer support at customercare@23andme.com

Otherwise, to delete your 23andMe account, do the following: 

  1. Log into your 23andMe account.
  2. Click “Settings.”
  3. Scroll down to ‘23andMe Data.’ 
  4. Click “View.”
  5. Scroll to ‘Delete Data.’
  6. Click “Permanently Delete Data.”
  7. Confirm your deletion request via email

After you delete your 23andMe account, your personal information won’t be used for future research (something that about 80% of 23andMe customers gave their consent for), and your genetic samples will be discarded (if you asked the company to store them previously). 

A big caveat 

Even if you delete your 23andMe account, the company may still retain some of your information. 

As per 23andMe’s privacy policy

“23andMe and/or our contracted genotyping laboratory will retain your Genetic Information, date of birth, and sex as required for compliance with applicable legal obligations … even if you chose to delete your account.” 

Remember to Opt Out of Genealogical Records Sites

Even if you’ve:

  • Never taken a DNA test
  • Deleted your 23andMe account 

Your information may still be available online in genealogy databases. 

It’s not your DNA, but it’s still your personal information, so take this time to delete yourself from these kinds of sites, too.

If you’re looking for directions, see our step-by-step guides:

Or, you can subscribe to our data broker removal service to have our privacy experts opt you out of these (and other) sites on your behalf. 

]]>
Who are these tracking companies? Meet AddThis. https://joindeleteme.com/blog/addthis/ Thu, 18 May 2023 17:26:46 +0000 https://joindeleteme.com/blog/?p=7928

Table of Contents

AddThis is a social bookmarking service that allows website owners to add social media sharing widgets and buttons to their websites (those rows of “share this” buttons you see on lots of websites are actually tracking visitors). They can then track and analyze data around the content shared through these widgets, and provide insights to advertisers. AddThis is on 14 million sites and generates 10 terabytes of data every day.

How it works:

When you visit a website that’s part of the AddThis network, you might notice a column or row of social media sharing icons (Facebook, Twitter, Google+, etc.) next to content like blog posts or articles. If you choose to share content using one of those buttons, AddThis collects data around what you shared, the words you highlight and copy on websites, your clicks, and the kinds of content you and your friends find most interesting. They also build huge social graphs around this data to find similar networks.

For example, let’s pretend you and your friends tend to share articles about cats to Facebook. Let’s also pretend you and your friends happen to be very responsive to ads for a certain type of cat food. AddThis will comb its social graph for sets of friends who also share those same kinds of articles to Facebook, and then show those groups the same cat food advertisements to see if those friends are as responsive as you and yours.

So what?

In AddThis’s words, “What you share and who you share it with can tell you a lot about a person. And when you look at what millions of web users are sharing every day, you can learn an awful lot about your customers.” Users are never informed that AddThis is harvesting their behavioral data, even if they never interact with a “Share this!” widget on any page. AddThis has set a precedent of changing how the massive amounts of data they’re gathering from the pages using their widgets is being used, without informing the publishers of those pages.

On one hand, AddThis has gotten into trouble with the FTC in the past with questionable uses of their technology, like installing cookies that, even when a user manually deleted them, could “revive” themselves within the user’s browser. On the other hand, AddThis is now an active member of two advertising industry organizations that are focused on protecting consumer privacy: the Network Advertising Initiative (NAI) and the Direct Advertising Alliance (DAA). AddThis no longer installs cookies on users’ browsers and the huge social graphs that they build are anonymized…but if they ever shared this data with someone who had even a fraction of your sharing interests affiliated with your real identity, that data can easily create a full picture of your social media activity and interests. This may not be information you want available to others.

How might AddThis benefit me?

AddThis’ goal behind all of the data collection they do around your social media sharing is to serve up more relevant ads based on your interests. They have also made it easier for you to share content from the websites that you like. (It’s worth noting that even when DoNotTrackMe blocks AddThis, you can still share that content just as easily.) Conversely, they’re making it easier for websites to track what kinds of content their readers like you are liking, and that (usually) means more of that same kind of content.

Want to dig even deeper? Check out AddThis’s privacy policy.
Read more about some of the other trackers DNTMe is now blocking:

]]>
A Short History of Equifax Privacy Issues + Steps to Improve Your Privacy  https://joindeleteme.com/blog/equifax-privacy-issues/ Thu, 13 Apr 2023 21:18:51 +0000 https://test.joindeleteme.com/blog/?p=7766

Table of Contents

Equifax has a lot of data about you. This data could have a significant impact on your life. 

Equifax is among the largest data brokers in the United States and one of three major credit reporting agencies. It collects and assesses consumer credit information through around 10,000 different companies or information “furnishers.” 

This data is then sold to financial institutions, employers, and marketers, but as demonstrated by numerous security issues, it can also end up in the hands of cybercriminals.

Below is a quick history of Equifax privacy and security issues, as well as steps you can take to protect your privacy. 

Equifax Privacy and Security Issues

The 2017 data breach is well known, but Equifax has had other security and privacy failings. Below are some of them. 

1970: First warnings of personal data collection and sale

Equifax has been collecting personal information about individuals for decades. In 1970, when it was still known as Retail Credit Company, Columbia University professor Alan Westin wrote about the company’s practices in the New York Times. 

The files the company kept on people, Westin said (as reported in a Wired article), “may include ‘facts, statistics, inaccuracies and rumors’ … about virtually every phase of a person’s life; his marital troubles, jobs, school history, childhood, sex life, and political activities.” 

Consumers had no way to see what these files contained. Most didn’t know they existed. 

That same year, Retail Credit Company was about to start computerizing its files, something that Westin found particularly worrying. He said the step would threaten civil liberties and privacy because access to people’s most personal information would become so simple. 

Westin went on to testify on the subject before Congress, and these hearings reportedly contributed to the passage of the Fair Credit Reporting Act toward the end of 1970. Some people also believe that this encouraged the Retail Credit Company to change its name to Equifax as a way to start “fresh.” 

2016: Equifax ignores a security vulnerability 

In 2016, a security researcher notified Equifax of a serious security hole: an online portal that was supposed to be accessible to Equifax employees only was exposed to the entire internet. 

Anyone could find personal information about Equifax customers by simply putting in a search term, wrote the Motherboard.

The vulnerability was not patched for six months, by which time the notorious 2017 breach (described below) had already occurred. This puts into sharp focus the lax security that companies that collect consumers’ personal information have. 

2017: Data breach and exposure of American salary information

In early September of 2017, Equifax announced a data breach that had been discovered in late July, potentially exposing personally identifiable information (PII) of 143 million consumers across the U.S., U.K., and Canada.

As reported by KrebsonSecurity, Equifax’s lack of security within TALX (pronounced “Talks”), one of their subsidiaries, has made it easy for hackers and ID thieves to access the employment and salary history of impacted individuals.

TALX provides payroll, HR, and tax services to employers online and operates as Equifax Workforce Solutions as of 2012. One of the popular features of TALX, known as “The Work Number,” allows for automated verification of employment and income used for prospective employers.

In May 2017, KrebsonSecurity recounted a security breach announced by TALX to its Work Number service, caused by unauthorized account access by hackers who were able to reset account PINs by successfully answering account security questions. 

By gaining access to this database, hackers can easily obtain, record, and index work and salary histories of the 143 Equifax hack victims announced in September 2017, using the PII that was breached and released during the July 2017 breach.

Threats of identity theft should not be taken lightly, as illustrated by Katie Van Fleet, the Seattle woman who’s claimed to have had her identity stolen 15 times since the Equifax breach. Additionally, it can take months or years to fully recover from being a victim of identity theft due to the extent that thieves have gone to in order to secure your identity.

2012 – Present

Ever since the Consumer Financial Protection Bureau database was put online, countless consumers have filed complaints against Equifax. For example, in 2022, there were 184,666 complaints filed by consumers against Equifax. This is a 24% increase from 2021. 

The most common complaint is about inaccurate information. Another common complaint was the improper use of consumer credit reports, i.e., someone checking their credit score without getting their consent to do so first.

Unfortunately, getting inaccurate information fixed seems to be a struggle for many consumers. According to CBS News, one consumer wrote, “Hello my name is XXXX XXXX and XXXX have been reaching out to all three credit bureau’s via mail trying to resolve this debilitating issue for the past 7 months to no available.”

2022: Equifax sued for inaccurate credit scores

In 2022, a coding error at Equifax led to some consumers applying for home and car loans being given an erroneous credit score. In at least one case, the inaccurate score is said to have led to a pricier auto loan. 

Steps to Improve Equifax Privacy

The good news is that Equifax gives consumers the option to take control of their personal information. 

Through Equifax’s online portal, you can do the following:

  • Ask Equifax to see the kind of personal information they’ve collected about you. 
  • Ask Equifax to delete your personal information. 
  • Ask Equifax to correct inaccurate information about you.
  • Ask Equifax to limit whom it shares your personal information with. 
  • Ask Equifax to stop sharing your personal information with third parties.

For step-by-step instructions on how to remove yourself from Equifax, follow our guide

]]>
Twitter Photo Tagging: How And Why to Opt-Out https://joindeleteme.com/blog/twitter-photo-tagging-privacy/ Thu, 13 Apr 2023 21:15:48 +0000 https://test.joindeleteme.com/blog/?p=7764

Table of Contents

Not comfortable with the idea of people being able to tag you in the photos they post on Twitter? You can change your Twitter settings to opt out of Twitter photo tagging.

By making yourself “untaggable,” you can prevent other people from being able to find photos of you on Twitter. 

The below guide will show you step-by-step instructions on how to stop other people from being able to tag you in photos on Twitter. 

How to Opt-Out of Twitter Photo Tagging (Mobile_

Step 1. On the Twitter app on your phone, click the profile icon. 

Step 2. Click “Settings & Support” and then “Settings and privacy.” 

Step 3. Next, click “Privacy and safety.”

Step 4. Then, click “Audience and tagging.”

Step 5. Click “Photo tagging” and change the settings to “off.” 

How to Opt-Out of Twitter Photo Tagging (Browser)

Step 1. Log in to Twitter. From the left-hand side menu, click “More.”

Step 2. Click “Settings and Support” and then “Settings and Privacy.”  

Step 3. Next, click “Privacy and safety” and then “Audience and tagging.” 

Step 4. Then, click “Photo tagging.” 

Step 5. Disable the feature that lets people tag you in their photos.

Opting Out When You Don’t Know You’re In

It’s not just Twitter you need to worry about. The fact is that countless other websites expose your personal information without your knowledge. They’re known as data brokers, and they sell information about you to marketers, financial institutions, and even cybercriminals. 

If you care about your privacy, we have a series of guides on how to opt out of these sites. Or, we can do it for you.

]]>
How to Remove Yourself from Background Check Websites https://joindeleteme.com/blog/how-to-remove-yourself-from-background-check-websites/ Thu, 13 Apr 2023 21:13:06 +0000 https://test.joindeleteme.com/blog/?p=7763

Table of Contents

You need to learn how to remove yourself from background check websites.

Why? Because there’s something fundamentally wrong with background check websites.  They get our personal data through public record sources, like birth certificates, real estate purchase and sale records, lawsuits, marriage licenses, and even social media accounts–for free–and then they stockpile it, post it for the world to see, and sell it.  

Background check sites argue that they’re simply reposting public record information that already exists for anyone to access.  

In reality, they’re doing something completely different: they’re making all of our personal info more visible and more accessible than ever before. It’s not just a public record anymore; it’s super public. There’s a big difference between A) physically walking down to a courthouse and asking for a copy of a legal filing so you can find someone’s name and address from it and B) looking it up on a search engine from your couch.

For people with stalkers, a history of domestic abuse, a vindictive ex, or just a general interest in staying private, having their contact information (phone numbers, home addresses, etc.) so readily available isn’t just annoying; it’s dangerous.  

Getting personal data removed shouldn’t be as confusing and time-consuming as it currently is. Unfortunately, scrolling through long Terms of Use, privacy policies, and contact forms to find how to delete yourself, it becomes painstakingly obvious that many of these companies try to make it difficult to remove listings; after all, your data is their lifeblood.

Privacy laws have not caught up with this new reality yet. Lawmakers need to recognize that the super-public nature of these background check sites, aka people search websites, has strayed too far from our original concept of “public record,” and everything needs to be opt-in by default.  

If these companies want to profit off the facts that make us who we are–our names, ages, birth dates, addresses, and family members–we should have a say in that. And if we decide that it’s okay, we should see a cut of that profit. At the very least, these sites should have one uniform, simple, clearly-displayed opt-out method.

Until this happens, the burden is on us to play cat-and-mouse with these companies: we follow their convoluted rules and delete ourselves; they try to find us again.  

DeleteMe will do it for you if you want to save time, but if you’d rather do it yourself, see below for full instructions. If keeping your contact information private is important to you, please keep spreading the word to anyone you care about.

How to Remove Yourself from Background Check Websites

Click on each background check site for detailed, step-by-step instructions on how to remove your name from their database:

Note: The removal process varies from one background check site to another; some will request that you fill out an opt-out form, while others may ask you to send an email or call them using contact details found on their opt-out page.

Going Beyond Learning How to Remove Yourself from Background Check Websites

Having your personal information so readily available online puts you at increased risk of harassment, identity theft, and other threats.

Unfortunately, the above are not the only websites where people can find information about you, from your full name, date of birth, and aliases to court records and bankruptcies. To see an even longer list of people search sites, including Whitepages.com, zabasearch, mylife.com, and instant checkmate, go to our guide, where we detail the opt-out process for some of the most popular data broker sites.

Remember: data broker sites relist people once they collect more information on them, so you need to make removal requests to these sites regularly. Don’t have the time? DeleteMe can send opt-out requests on your behalf on a continuous basis.  

]]>
How Secure Is My Password: The Ultimate Litmus Test (2023) https://joindeleteme.com/blog/how-secure-is-my-password/ Thu, 13 Apr 2023 21:09:14 +0000 https://test.joindeleteme.com/blog/?p=7760

Table of Contents

Your passwords are weak. 

This is an assumption, of course, but if you’re anything like most internet users, it’s likely to be true. 

Consider this:

With data breaches, identity theft, and financial fraud on the rise, having a predictable password makes you increasingly vulnerable. In fact, your accounts may have already been hacked into or your identity stolen; you just may not know this yet. 

If you want to improve your online security and privacy, changing your passwords is the easiest thing you can do. It is also likely to have the biggest impact. 

Below we show you how secure your password is by reviewing some simple tips, techniques, and tools you can use when creating passwords. 

What Does It Mean to Have a Good Password, and How Can I Create One?

Avoid popular passwords. The more unique and random you can make your password, the better. 

Entropy, a measure of randomness, can help you decipher whether your combination of letters, numbers, and symbols has enough randomness to be a strong password. Using common words makes weak passwords.

Any words you can find in the dictionary, and any repetition of those words, decreases entropy and makes a password hack far more likely. 

Using personal information for passwords, like the year you were born or your spouse’s name, is likewise a big no-no. The reason why is that cybercriminals can easily find this information online. 

Using one password across multiple websites (social media, bank accounts, etc.) also puts all of your online accounts at risk. 

Password length matters too. Use as many lowercase letters, uppercase letters, numbers, and symbols as possible within the website’s limits, and remember to change your password from website to website for optimal password strength.

If you struggle coming up with strong passwords, you could try creating passphrases instead.

Alternatively, a password manager might be a better option. Password managers often come with a password generator and are deemed more secure than just relying on memory to remember passwords (even with cybersecurity breaches like the one that affected LastPass). Just remember to use a strong master password, as cybercriminals can also use brute force techniques to guess these.

How Secure Is My Password? Testing the Strength of Your Passwords

There are many free tools online that can assist you in testing the strength of your password. Here are a few “password strength meters” where you can enter your password to see how long it would take a potential hacker to crack it and gain access to your private information:

These tools can also tell you whether your letter, number, and symbol combinations have adequate entropy to create a unique password. 

You can also use tools like this one by Home Security Heroes to see how long it would take AI to crack your passwords. With the use of AI, cybercriminals can crack most passwords instantaneously. 

Don’t Forget MFA (But Don’t Rely On It)

Even if you’re confident in your password security, it’s still a good idea to set up multi-factor authentication (MFA).

MFA adds an additional step in the login process, so even if a cybercriminal gets their hands on your password, they won’t be able to sign into your account – they’ll have to provide more information.

At the same time, MFA is not foolproof.

Recent security breaches demonstrate that criminals can bypass MFA with attacks like SIM swapping (where they convince your phone provider they’re you in order to have your phone number transferred to their phone) or MFA fatigue (where they spam you with MFA push notifications until you accept.

Why Should I Remove My Personal Information from the Internet? 

If your personal information is freely available on the internet, then cybercriminals will be able to find a way to hack into your accounts.

For example, cybercriminals may use your personal information to answer password reset questions or send you personalized phishing emails where they trick you into revealing sensitive data or downloading malware.

As a result, it’s a good idea to ensure there’s as little personal information available about you online as possible. Keep your social media accounts private, never overshare on forums, and make sure to opt out of data brokers (read more about these shadowy companies and what they do with your personal information in our ultimate guide on data brokers). 

]]>
23andMyIdentity: Genetic Testing Privacy https://joindeleteme.com/blog/genetic-testing-privacy/ Thu, 13 Apr 2023 20:55:41 +0000 https://test.joindeleteme.com/blog/?p=7755

Table of Contents

23andMe might be one of the more popular direct-to-consumer genetic testing companies on the internet, but it’s by no means the only one. 

In the last few years, more online genetic testing companies have popped up for various purposes, from discovering ancestry information to figuring out potential health risks and even identifying whether you and your partner are “genetically compatible.” The uses may differ, but one thing remains a big concern: your privacy.

While at-home genetic tests can provide exciting and helpful information, consumer privacy may be compromised along the way. 

The reason why is that these tests often ask for more personal information than necessary, including health information and data about family members. In reality, all they need is a way to contact you and connect you to the test you send them.

As a result, reading these companies’ privacy policies and using online safety procedures when registering for an online genetic test to protect your identity, location, and personal information is the best way to take the test safely. 

Genetic Testing Privacy Policies

We read the privacy policies and FAQs from 23andMe and some competitors, including XCode, MapMyGenome, GenePartner, Pathway Genomics, AncestryDNA, MyHeritage, and iGENEA. If you choose to take a genetic test from any genetic testing services, we encourage you to read the privacy policy for your own benefit.

Still, we know that privacy policies can be tricky to navigate and sometimes hide information. 

In fact, some of the policies we read seemed a bit vague in areas–claiming that they collect or use the genetic information for what they deem “necessary for legitimate business purposes.” One company even wrote that they could use a customer’s genetic data for research purposes or for a third party without the customer’s consent. Now, do you see why it’s imperative to read those privacy policies carefully?

Many of the companies remind you in their privacy policy that if law enforcement comes knocking for your information, they are required to hand over your genetic profile and everything connected to it–all of your personal information. 

If you don’t give the service your real personal information in the first place, it would be extremely difficult to link the genetic information back to you. 

Some companies caution that “there can be no guarantee of privacy,” even given their encrypted information and secure systems–another reason not to share data with them.

One company based outside of the United States even coaxed customers into participating in research by first noting that a consent form was necessary for the procedure to begin. The consent form allowed the company to use the customer’s genetic information and results for research. The privacy policy made it seem as if the customers had a choice in the matter: “With your consent, the delinked data….will be part of our research database. This will help you serve the Indian community better and contribute to health science.” While customers of 23andMe have the choice to opt out of research, this company made research necessary for participation in the genetic testing procedure.

Privacy Concerns and Privacy Laws Around Personal and DNA Data

When it comes to the use of genetic information, there are few privacy protections available.

For example, the Health Insurance Portability and Accountability Act (HIPAA) and the Genetic Information Nondiscrimination Act of 2008 (GINA) are two federal laws that deal with genetic information privacy.

However, even though HIPAA applies to the results of genetic tests administered by your healthcare provider, it does not extend to direct-to-consumer (DTC) genetic testing companies. Similarly, while GINA safeguards individuals from being discriminated against by health insurance companies and employers, it doesn’t cover other third parties or other kinds of insurance companies.

Just a handful of state laws provide better DNA data privacy. For example, in 2021, California passed the Genetic Information Privacy Act (GIPA), a genetic privacy bill. The bill establishes requirements for collecting, using, and disclosing consumer DNA data from direct-to-consumer genetic testing services.

This lack of legal protection creates a potential for a multitude of privacy risks, particularly because DNA data can’t be de-identified.

Keep Your Personal Information to Yourself

Most genetic testing companies’ privacy practices are risky to consumer privacy.

As a result, the best thing you can do when using one of these services is to provide as little real information about yourself as possible during the entire process. 

The only reasons that genetic testing companies need your personal information (i.e., name, phone number, home address, email address, etc.) are to:

  • Send you the testing kit 
  • Link your genetic test to your profile so that you can receive your test results.

As long as you provide a way for the company to contact you–through email and telephone number forwarding–you can choose not to provide your real personal information. 

The only caveat here is that if you want a 100% safe experience that cannot be linked to you, you’ll have to choose a shipping address that you have access to but isn’t your actual home address. You could try a friend’s home address or even a more distant connection if they are willing to receive your package.

After you handle the shipping situation, you are all set to sign up and order the test. You’ll want to turn on a VPN or Virtual Private Network to reroute your IP address. This will make it appear that you are browsing from somewhere other than your current location–whether that is somewhere else in the United States or halfway across the world.

Next, you should make sure that you have a tracker blocker or private browsing mode on in your browser. Note that Private Browsing, Incognito, and similar modes do not guarantee your private browsing experience and do not always block ad trackers. 

When asked for your personal information, you can make up a fake name to keep yourself protected. Then, use a fake email (an email that isn’t linked to you)  or set up email and mobile phone number forwarding using masked email services to provide a way to contact you without giving out your real information.

At this point, you’ll be asked to enter a billing and shipping address as well as payment information. By using either a prepaid debit card or a masked credit card, you can pay for the genetic test without giving out your real credit card information. For a prepaid debit card, you should use a made-up billing address.

So far, these companies have not been able to collect any of your actual private information. Some companies may ask you to complete additional questionnaires, which they claim will give you a better report because they will have more background information. But is this necessary, or is it just another link back to your identity? Based on our experience, you can still get a lot out of the genetic test and do not need to answer these additional and often invasive personal questions.

When your test arrives, you can use the same masked personal information to link your test to your previously created profile. Don’t forget your VPN and tracker blockers! Since the postage is prepaid to send back your test, you have officially completed your portion of the procedure without giving up any of your real personal information.

By spending a few more minutes setting up privacy parameters when purchasing a DNA testing kit, you can protect your private information and prevent it from being linked to you in case of a data breach or another sticky situation.

Even so, always be sure to read the company’s privacy policy to know what will happen to your genetic information, and keep creating strong, unique passwords for all your accounts.

Don’t Forget to Opt-Out of Genetic Testing Sites

Even if you don’t give a genetic testing company your personal information or take a test, they may still have personal data about you. 

For example, besides DNA testing, Ancestry.com genealogy service also provides sensitive information based on public records. Therefore, personal information that can be used to impersonate you can be easily accessed through genealogy databases online. There have also been instances of DNA databases being hacked.

Luckily, you can opt out of these kinds of databases. We have a whole series of guides that walk you through opting out from genealogy sites, including:

Or, we can do it for you if you subscribe to our data broker removal service. 

]]>
A Guide to Online Presence for Job Seekers https://joindeleteme.com/blog/online-presence-for-job-seekers/ Thu, 13 Apr 2023 20:49:30 +0000 https://test.joindeleteme.com/blog/?p=7751

Table of Contents

You used to have just one resume:  it was paper, you controlled everything in it, and you gave it to hiring personnel.  You got to choose exactly how to present yourself.  

For better or worse, that period in hiring history is now over.  Today, you have two resumes:  the traditional one that you carefully write and edit and distribute, and the nontraditional, digital one that’s the sum of your online activities.  

Many hiring personnel will look at both. Read on for our advice on putting your best foot forward online.

Unfortunately, many people aren’t aware of how public their digital selves are.  Job seekers can no longer afford to neglect their digital resumes and cover letters.  Employers want to know as much as they can about you, and the trail of activity you leave behind you on the Internet gives them a much more detailed view into your life than a carefully-worded resume does.  

Think of it strategically:  when job hunting, you now have another channel to present yourself and make a great first impression (and we’re not just talking about your LinkedIn profile, either).

Online Presence for Job Seekers: Is It Really That Important?

Yep. A CareerBuilder survey found that 66% of employers look up a job candidate online, and 70% look at their public posts on Facebook and other social media platforms. 

There are now even companies that streamline the process of screening job applicants based on their social media presence and other online profiles.

In rare cases, employers may even ask potential hires for their Facebook login information as part of the hiring process. 

Factors to Consider When Deciding Whether or Not to Post Something Online

You want to balance the positives of social networking, like expressing yourself and connecting with people, against the risks.  

One-third of employers who check social networking sites in hiring have passed on a candidate because of a red flag they found in the process. Assume that everything you post on social media sites and elsewhere online (including forums) is public or will end up public.  Ask yourself if you’d be comfortable with it being in a major newspaper next to your name.  

What does it mean for something to be objectionable?  It depends on the workplace culture of the employer you’re interviewing with, but always ask yourself if it’s something you would do in the office or at work or that you can imagine other employers doing.  If the answer is no, de-tag, delete, or don’t post.  

Here are some general guidelines, with particular emphasis on photos:

  • Apply the highest standards to your profile pictures.  These are the ones that employers are most likely to see.
  • Focusing on drinking = bad.  One glass of wine in your hand or a beer in the background is probably fine, but holding three shots up to your face isn’t.
  • No drugs or drug paraphernalia.
  • No sexually explicit or overly suggestive photos.
  • Please don’t document your makeout/hookup through tags.

Certain posts are riskier than others.  

Of hiring managers who declined to hire a candidate, 49% did so because of provocative or generally inappropriate photos and posts, while excessive drinking or drug use came in behind at 45%.  Poor communication skills, like misspellings and bad grammar, came in at 35%.  33% of hiring managers didn’t choose a candidate because that person had publicly badmouthed a previous employer; 28% for discriminatory comments about gender, religion, or race; and 22% for lying about qualifications.

Steps to Take to Sanitize an Unflattering Digital Footprint

First, do a Google search of your name to see what comes up on search engines. This will give you a good idea of what the web is saying about you. 

Then, because a picture’s worth a thousand words, start with photos.  De-tag and delete any photos you’re uncomfortable with being seen by a potential employer.  You can download everything from Facebook in one quick step so you have copies of your pictures.  

Another important cleanup action is removing your personal information from background check websites.  

You may have found your personal information publicly listed and up for sale on background check websites, also called data brokers or people search websites (read more about these websites in our ultimate guide on data brokers).  One example is the site Spokeo.com.  Take a second now to visit Spokeo and search for yourself; we’ll wait.  You’ll probably be shocked by what comes up (and FYI, here’s how to remove your listing).

Many employers purchase background checks on potential hires as part of the hircess.  

However, background check websites are notorious for providing inaccurate files, sometimes reporting that a potential hire has a criminal record when they don’t, or getting other factual information wrong.  The FTC fined Spokeo $800,000 for actively marketing its background checks to hiring managers and recruiters.

Your best bet is to review the information these sites list about you and either make sure it’s correct or remove it from the site.

We’ve step-by-step guides on how to remove your name from some of the most popular data broker sites. 

Alternatively, our premium DeleteMe service will do the removals for you continuously (data brokers tend to relist individuals as soon as they gather more information on them, even if they had opted out previously). 

Balancing Online Authenticity And the Need for a Professional Image

Think of the job search process for the limited time period that it is:  you won’t have to be this strict forever.  It’s also unnecessary to censor so much that you aren’t yourself.  You can still speak about what’s interesting and exciting and funny to you but do so eloquently and with an eye for potentially risky content.

Use social media profiles and commenting to create a personal brand, improve your online reputation, and showcase your skill set.  

If you’re prepared for a little self-censorship, posting under your real name can be a smart strategy.  Knowing that anything you say online may show up when someone looks you up, use your postings (on personal websites, social media accounts, or elsewhere) to your advantage.  Post intelligent, grammatically-correct, spell-checked, well-reasoned content.  Express yourself in the field in which you want to become established.  Don’t forget that good search results can be better than no search results.

You can also create positive online content to bury negative online content, either by creating your own website or posting on existing sites.

Certain sites consistently appear high in the search results, and by simply creating a profile on them with your name and a bit of identifying information, you can suppress negative results. Make sure you set your privacy settings to be publicly viewed and only post content you’re absolutely sure you won’t regret later. Here’s a list of sites to use:

We hope these FAQs were helpful, and good luck getting hired! 

]]>