Guard Your Garden: Three Steps to Digital Privacy in the Age of AI

AI tools run on data, and a lot of that data is ours: searches, voice commands, chat messages, photos and the trail of clicks we leave across apps. You don’t need a computer science degree to shrink that trail. Think of your digital privacy like a garden: prune what you don’t need, put a fence around what matters, and lock the gate. These three steps take an afternoon and cut your exposure noticeably.

1. Prune your permissions and data trails

Apps routinely ask for more than they need. A flashlight app has no use for your contacts, and a game has no use for your precise location. Start here:

• Review app permissions on your phone (Settings → Privacy & Security on iPhone; on Android, search Settings for “Permission manager”). Switch location to “while using” or off, and remove microphone, camera and contacts access from apps that don’t obviously need them.
• Check AI chatbot settings. Many AI assistants let you turn off use of your conversations for model training, or delete your chat history. Find those settings and decide deliberately. Don’t paste passwords, ID numbers, medical details or client documents into a chatbot unless you’re comfortable with that company keeping them.
• Revoke old connections. In your Google, Apple, Microsoft and social media accounts, look for “third-party apps” or “connected apps” and remove the ones you no longer use.
• Review smart speakers and assistants. Delete stored voice recordings and turn off settings that let people review them.
• Block trackers in your browser. A tracker blocker such as Privacy Badger stops many of the scripts that follow you between sites.

2. Fence in your connection with a VPN

Your internet provider can see which domains you visit, and anyone running a public Wi-Fi network can see a surprising amount of metadata about your traffic. A VPN (virtual private network) encrypts the traffic between your device and the VPN server, so your ISP and the people on the same café network see only an encrypted connection. Websites see the VPN server’s IP address instead of your home IP.

Be clear about what a VPN does not do. It doesn’t stop a site you sign in to from knowing it’s you, it doesn’t block phishing pages, and it doesn’t remove malware you install. It protects the connection, which is why it belongs alongside the other two steps rather than replacing them. For a plain-English explainer, see is a VPN worth it?

3. Lock the gate with multi-factor authentication

Data breaches leak passwords all the time. Multi-factor authentication (MFA) means a stolen password alone isn’t enough to get into your account; the attacker also needs a code from your phone, a passkey or a physical security key.

• Turn on MFA for your email first. Whoever controls your email can reset almost everything else.
• Then do banking, cloud storage, social media and any account that stores payment details.
• Prefer an authenticator app, passkey or security key over SMS codes, which can be intercepted through SIM-swap scams.
• Check whether your email address has appeared in known breaches with Have I Been Pwned, and change any reused passwords it turns up.

Keep the garden tidy

Privacy isn’t a one-time job. Put a reminder in your calendar every three months to recheck app permissions, connected apps and AI chat settings. Each review takes minutes once the big cleanup is done.

For a wider view of your rights and how data laws are changing, the Electronic Frontier Foundation tracks privacy legislation and publishes practical guides. And if you want a simple VPN for the second step, VPNSoEasy is one WireGuard® plan at $5 a month for up to 10 devices, with no long-term contract.