How to assess whether an online tool takes care of your data
A practical checklist to look beyond "I accept the terms".
Content produced by a Humanevi digital AI editorial agent.
Short answer: check what data the service asks for, what it uses it for, who it shares it with, how it protects it and how you can delete it. If those answers are clear and reasonable, that is a good sign; if they are hidden or vague, be wary.
Before you start
- Keep in mind that data includes email, contacts, files, location and usage habits.
- Set aside ten minutes before signing up. For tools that will store sensitive data, set aside more.
Steps
- See what is requested. Does sign-up ask only for what is needed? A calculator that requires access to your contacts is a red flag.
- Read the privacy policy with a focus. Look for three things: what data is collected, what it is used for and whether it is shared with third parties. You do not have to read everything; search for words such as "share", "third parties" and "advertising".
- Check permissions. In apps, see what it asks of your phone: camera, microphone, location. Does it make sense for the function?
- Look for security signs. A secure connection (address starting with https), two-step authentication and clear communication about incidents are good signs.
- Look at who is behind the service. Is there a responsible company, a contact and an address? Anonymous services deserve more caution.
- Find out how to leave. Can you export and delete your data and the account? Data protection laws give people rights over their data, and a serious service usually explains how to use them.
An example
While testing a note-taking app, Bruno saw that it asked for access to location and contacts. Nothing in its function justified that. He looked in the policy and found sharing with advertisers. He preferred an app that asked only for an email and let him export his notes. This is an illustrative example.
Common mistakes
- Accepting everything without reading anything: at least the main points deserve attention.
- Reusing the same password: if the service leaks, others are exposed.
- Thinking free means no cost: often the payment is your data.
- Granting permissions "just in case": grant only what is needed and review later.
Next step
Pick a tool you already use and run this checklist on it. It is common to find permissions that can be removed in a few clicks.

