Cyber Security

The Privacy Mistakes People Make Without Realising It

Cyber Security Editorial Team 5 min read · Sep 7, 2024
The Privacy Mistakes People Make Without Realising It

Photo credit: GadgetLite.net | All Things Tech

In this article
  1. Small Habits, Big Consequences
  2. Building Better Habits Going Forward

Oversharing in app forms, reusing passwords, skipping updates — these small habits quietly erode your privacy. Here's what to watch for.

Key Takeaways

  • Oversharing personal details in app sign-up forms creates unnecessary long-term data exposure.
  • Reusing passwords across accounts turns a single breach into a widespread vulnerability.
  • Skipping app permission reviews lets background data collection go unchecked.
  • Delaying software updates leaves known security gaps open for exploitation.
  • Public Wi-Fi without a VPN exposes your activity to anyone on the same network.

Small Habits, Big Consequences

Most privacy erosion doesn't happen through dramatic hacks or elaborate scams. It happens gradually — through small, routine decisions that feel completely harmless in the moment. Filling out a form here, tapping "Allow" there, using the same password you've had since college. None of these feel risky, which is exactly why they're so common.

Understanding where your data actually goes — and how your everyday habits shape that — is the first step toward making smarter choices. The mistakes below aren't about being careless. They're about not knowing what to look for. That's an easy thing to fix.

For a deeper look at how data sharing involves real trade-offs, see our article on what you gain and give up by sharing personal data.

1

Filling in every field on sign-up forms, including optional ones.

Why it happens: Forms are designed to look like everything is required. Most people complete them top to bottom without checking which fields are actually mandatory.

How to avoid: Look for the asterisk (*) that marks required fields, and leave optional fields blank whenever possible. Providing a birthdate, phone number, or address when an app doesn't genuinely need it creates data that can be stored, shared, or exposed in a breach. Practicing data minimisation before you sign up is one of the most effective privacy habits you can build.
2

Reusing the same password across multiple accounts.

Why it happens: Remembering dozens of unique passwords feels overwhelming, so people default to one or two they can recall easily.

How to avoid: Use a password manager — a secure app that stores and generates unique passwords for every account so you only need to remember one master password. When one site suffers a breach, credential stuffing (where attackers try stolen username/password combinations on other sites) means a reused password can unlock many accounts at once. See common password security myths to understand why small tweaks like adding "1!" to a familiar password don't actually help.
3

Granting app permissions without reviewing what's actually being requested.

Why it happens: Permission prompts appear during setup when people are focused on getting to the app itself, making reflexive tapping the path of least resistance.

How to avoid: Before tapping "Allow," ask whether the app genuinely needs that access to function. A flashlight app requesting your contacts is a red flag. After installation, revisit your phone's permission settings and revoke any access that doesn't make sense. Our article on the hidden risks of over-permissioning apps explains exactly what's at stake.
4

Postponing software and app updates indefinitely.

Why it happens: Updates feel like an interruption, and "remind me later" is easy to keep tapping. Many people don't connect updates to security.

How to avoid: Enable automatic updates wherever possible for your operating system and apps. Security patches — fixes for known vulnerabilities that attackers actively exploit — are frequently bundled into routine updates. Delaying them leaves a window open that's already been identified and documented publicly. If you're noticing other unusual behavior alongside sluggish updates, check for signs that an app may be overstepping.
5

Using public Wi-Fi for sensitive tasks without any protection.

Why it happens: Free Wi-Fi feels like a convenience that comes without risk, especially in familiar places like coffee shops or airports.

How to avoid: Avoid logging into bank accounts, email, or any account containing sensitive information on public Wi-Fi unless you're using a VPN (Virtual Private Network — a tool that encrypts your internet traffic so others on the same network can't intercept it). If you must use public Wi-Fi without a VPN, limit yourself to low-stakes browsing. For more on everyday protective habits, see ongoing habits for better app privacy.

Building Better Habits Going Forward

Correcting these mistakes doesn't require becoming a cybersecurity expert. It requires a small shift in attention — pausing before you fill out a form, reviewing app permissions periodically, and treating password reuse as the genuine risk it is.

81%

Of breaches involve weak or reused passwords

According to Verizon's Data Breach Investigations Report, the vast majority of hacking-related breaches exploit stolen or weak credentials.

52%

Of people reuse the same password across accounts

A Google/Harris Poll survey found that more than half of respondents reuse passwords, significantly amplifying the impact of any single breach.

Your phone's settings menu is one of the most underused privacy tools you already own. Most operating systems let you review exactly which apps have access to your location, microphone, camera, and contacts. A monthly five-minute audit of those settings goes a long way. Our guide to privacy settings you should review right now walks through this step by step.

If you want to dig further, explore the App Privacy & Safety hub for practical guidance, or review the Password & Account Safety hub to strengthen your account security from the ground up.

Don't Assume Deleted Means Gone

Deleting an app from your phone does not automatically delete the data that app collected and stored on its servers. Many services retain user data for months or years after account closure. Before deleting an app, check whether the service allows you to request data deletion through their privacy settings or by contacting support. Our article on app privacy myths most people still believe covers this and other widely misunderstood assumptions.

Cyber Security Editorial Team

Author

Cyber Security Editorial Team

Cyber Security Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.

View all articles →
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.