Why I Stopped Oversharing on Social Media

Why I Stopped Oversharing on Social Media

For years I posted without thinking twice about it. Holiday photos while I was still away, the school my kids went to tagged in a dozen pictures, a running commentary on my daily routine that anyone could piece together in an afternoon. None of it felt risky in the moment because none of it felt like a secret. It's just what you post, isn't it. The shift for me wasn't a single bad experience. It was slowly realising that a stranger scrolling through my profile could build a surprisingly accurate picture of my life, my habits, and my family, without me ever handing it to them directly.

What I Used to Post Without Thinking

My old habit was simple. If something happened, I posted about it, usually in real time. A weekend away, a new car, a work trip, my daughter's first day at a new school. I liked the connection it gave me with friends and family who weren't nearby, and I still think that part of it is genuinely valuable. What I didn't think about was how much of that content, added together over months, formed a detailed pattern. Anyone could have worked out roughly when my house was empty, which school my children attended, what car I drove and therefore what it was worth, and who was in my immediate circle.

None of that felt sensitive individually. A single holiday photo isn't a security risk on its own. The problem was the accumulation, and I wasn't thinking in those terms at all.

What That Information Actually Adds Up To

The specific thing that changed my thinking was reading about how scammers use publicly available information to make fraudulent approaches feel personal and convincing. A message that references your actual holiday dates, your child's actual school, or the name of a relative you've tagged before doesn't read as a generic scam. It reads as something only someone who knows you could have sent, which makes people far more likely to lower their guard.

I've written before about a voice clone call that nearly caught me out, and the unsettling part wasn't the cloned voice itself. It was how a scammer could combine a few seconds of publicly posted audio with details lifted from social profiles to build something convincing enough to fool someone who wasn't expecting it. Social media doesn't need to be hacked for this to work. Public information, freely posted, is often enough on its own.

The Specific Things I Stopped Sharing

I didn't delete my accounts or stop posting altogether, because that felt like an overcorrection I wasn't prepared to make. What I changed was more specific. I stopped posting about travel while I was still away, and now wait until I'm back home before sharing anything. I stopped tagging my children's school by name, even in posts that felt otherwise harmless. I got more careful about geotagging, since a location tag on a photo taken at home effectively confirms an address to anyone looking.

I also went back through older posts and removed a few that, on reflection, gave away more than I'd intended, a work ID badge visible in a photo, a house number caught in the background of a picture I'd forgotten about. None of it was catastrophic individually, but together it was more than I was comfortable having permanently public.

How I Handle Privacy Settings Now

Beyond what I post, I changed who could see it. I moved my main accounts to a more restricted audience rather than fully public, and I went through my friends and followers lists to remove accounts I no longer recognised or had any real connection to. It's an uncomfortable thing to do, culling a list you built up over years, but a follower list full of people you can't actually vouch for isn't really privacy at all.

I also locked down the account itself the same way I treat anything else that matters, with a strong unique password kept in a password manager rather than something reused from another site, and two-factor authentication turned on wherever the platform offers it. A social account is still a login like any other, and losing access to it can be just as disruptive as losing access to email or banking.

What I Still Post, and Why That's Fine

I want to be clear that this isn't an argument for disappearing from social media entirely. I still post plenty, and I still enjoy the connection it gives me with people I don't see often enough. What changed is the timing and the specifics, not the overall willingness to share. Holidays get posted once I'm home. Family milestones get shared without naming exact schools or routines. Photos get a quick check for background details before they go up, not an anxious audit, just a habit that takes a few seconds.

That's really the whole shift. I didn't need to become paranoid about social media to close the gap I'd been ignoring. I needed to notice that the same basic checks I use for suspicious messages apply just as well to what I choose to post myself, since the goal in both directions is the same: don't hand a stranger more than they need. If you want the fuller version of what I've put in place, I've pulled it together in a free Safety Toolkit, and the NCSC has clear guidance on protecting your personal information online too.