Making your TikTok account private won't protect you nearly as much as you think. Even with every privacy toggle switched on, TikTok collects an extraordinary amount of data about your behavior, location, and device—and that's before we talk about how data brokers scrape whatever you leave public to build profiles they sell to anyone willing to pay.

The uncomfortable truth: TikTok's privacy settings control who sees your content, not what data the platform vacuums up about you. Based on our analysis of data broker profiles, we've found TikTok usernames, profile information, and associated data points appearing across hundreds of people search sites—even for accounts that were set to private for years. The privacy settings help, but they're just the first step in a much longer process of actually protecting your information.

Why TikTok Privacy Settings Actually Matter (And Why They Don't)

TikTok's default settings are aggressively public. New accounts automatically allow anyone to view videos, send messages, duet with your content, and see your liked videos. For a platform with over 150 million US users—many of them teenagers—this default-public approach creates a massive privacy exposure.

The immediate risks are obvious: strangers commenting on your videos, unwanted messages, content theft, and potential stalking or harassment. We've seen cases where people's TikTok videos revealed their home address through background details, daily routines through posting patterns, and workplace information through uniforms or location tags.

But here's what most privacy guides won't tell you: switching to a private account solves the social privacy problem while barely touching the data privacy problem. TikTok's parent company ByteDance still collects your precise location data, tracks every video you watch (including how long you watched it), monitors your keystroke patterns, scans your clipboard, and builds a detailed behavioral profile—all regardless of whether your account is public or private.

A 2022 analysis by Internet 2.0 found that TikTok's data collection practices exceed even Facebook and Instagram in certain categories. The app can collect biometric data including "faceprints and voiceprints" according to its own privacy policy. Your private account settings don't opt you out of any of this.

Still, privacy settings matter. They create barriers between your content and the broader internet, making it harder for data brokers, potential employers, bad actors, and random strangers to access information about you. They just don't do everything people assume they do.

How to Make Your TikTok Account Private

The process takes less than two minutes, but most people miss critical settings beyond the basic private account toggle. Here's the complete walkthrough.

Step 1: Open Privacy Settings

Tap your profile icon in the bottom right corner, then tap the three horizontal lines in the top right. Select "Settings and privacy" from the menu. Tap "Privacy" at the top of the settings list.

Step 2: Switch to a Private Account

At the top of the Privacy menu, you'll see "Private account" with a toggle switch. Turn this on. TikTok will show a confirmation explaining that only approved followers can see your videos, likes, and following list. Confirm the change.

This is the nuclear option for content privacy. Once enabled, every new follower requires your approval. Existing followers remain unless you manually remove them. Your videos won't appear on the For You page for non-followers, and your profile won't show up in search results for people who don't follow you.

Step 3: Restrict Who Can Send You Messages

Back in the Privacy menu, scroll to "Direct messages" and tap it. You have three options: Everyone, Friends, or No one. "Friends" means mutual follows—people you follow who also follow you back.

Set this to "Friends" at minimum, or "No one" if you want complete message blocking. The "Everyone" setting is how strangers end up in your DMs with everything from spam to harassment.

Step 4: Control Comments on Your Videos

Scroll to "Comments" in the Privacy menu. Tap it and select who can comment: Everyone, Friends, or No one. Below this, enable "Filter all comments" to automatically screen out spam and offensive comments.

More importantly, tap "Filter keywords" and add terms you want blocked. TikTok provides default filters, but you should customize this based on your content and audience. We recommend being aggressive here—you can always remove filters later.

Step 5: Disable Duets, Stitches, and Downloads

These features let other users incorporate your videos into their content or save them to their devices. In the Privacy menu:

Tap "Duet" and set it to "Only you" or "Friends"
Tap "Stitch" and set it to "Only you" or "Friends"
Tap "Downloads" and set it to "Off"

Even with a private account, followers can duet, stitch, or download your content unless you specifically disable these features. This is how "private" TikTok videos end up on YouTube, Instagram, and data broker databases.

Step 6: Hide Your Liked Videos

In the Privacy menu, scroll to "Liked videos" and set it to "Only me." By default, anyone who views your profile can see every video you've liked—a surprising privacy hole that reveals your interests, political views, and browsing habits.

Step 7: Restrict Data Sharing with Third Parties

Scroll down in Privacy settings to "Data" and tap "Personalization and data." Here you can disable "Personalized ads" and "Off-TikTok activity." While this doesn't stop TikTok from collecting the data, it theoretically limits how that data is used for ad targeting and how third-party websites share your browsing behavior back to TikTok.

The Privacy Settings Most Users Never Touch

Beyond the obvious toggles, TikTok buries several critical privacy controls that dramatically affect your exposure.

Suggest Your Account to Others

Go to Settings and privacy > Privacy > Suggest your account to others. Turn off all three options: "Users who open or send links to you," "Users who sync contacts," and "Facebook friends." These features actively promote your account to people based on your contact list, Facebook connections, and link-sharing behavior.

This setting is particularly insidious because it works both ways. Even if you don't sync your contacts, if someone else syncs theirs and has your number, TikTok can suggest your account to them. Disabling this at least prevents your account from being suggested based on your own contact list and link activity.

Location Services and Precise Location

TikTok requests location access for features like location-tagged videos and local content recommendations. Go to your phone's settings (not TikTok's in-app settings), find TikTok in your app list, and set Location to "Never" or "Ask Next Time."

On iPhone: Settings > TikTok > Location > Never

On Android: Settings > Apps > TikTok > Permissions > Location > Don't allow

TikTok can still infer your approximate location from your IP address, but this prevents the app from accessing your precise GPS coordinates. We've seen data broker profiles that include latitude and longitude data clearly sourced from social media location tags.

Search Privacy and View History

In Privacy settings, tap "Search" and disable "Show search history." Also tap "View history" and consider turning it off—this stops TikTok from maintaining a visible list of every video you've watched, which could be accessed if someone gets into your account.

Sync Contacts and Facebook Friends

Go to Settings and privacy > Privacy > Sync contacts and Facebook friends. Make sure both are disabled. Contact syncing uploads your entire phone contact list to TikTok's servers, where it's used for friend suggestions and potentially other purposes not disclosed in the privacy policy.

What Data TikTok Still Collects from Your Private Account

Here's the hard part: even with every privacy setting maximized, TikTok's data collection continues unabated. The privacy policy explicitly states the app collects:

Device information: IP address, device ID, operating system, mobile carrier, screen resolution, device model, and app/file names. This creates a unique fingerprint identifying you across sessions.

Location data: Approximate location from IP address and SIM card, plus precise GPS coordinates if you grant permission. Even without permission, TikTok can infer location from content you interact with and time zone settings.

Behavioral data: Every video you watch, how long you watch it, videos you rewatch, accounts you visit, search terms, comments you read, hashtags you follow, and sounds you favorite. TikTok's algorithm is famously accurate because it tracks micro-behaviors—not just what you like, but what you almost liked, what you watched twice, and what made you stop scrolling.

Biometric data: The privacy policy allows collection of "faceprints and voiceprints" from content you create or upload. This means facial recognition data and voice pattern analysis.

Clipboard data: Until 2020, TikTok actively read clipboard contents every few keystrokes. After researchers exposed this, TikTok claimed it was for spam detection and removed the feature. But the privacy policy still reserves the right to collect "content of messages you send through our platform" and "metadata about those messages."

Network information: TikTok can see what other apps you have installed, what websites you visit (through tracking pixels and third-party data sharing), and how you interact with TikTok ads on other platforms.

None of this changes when you switch to a private account. The privacy settings control social visibility—who sees your content and can interact with you. They don't control data collection, which continues as long as the app is installed and running.

How Data Brokers Get Your TikTok Information

Data brokers acquire social media information through three primary channels, and your privacy settings only block one of them.

Public scraping: Before you made your account private, data brokers likely already scraped your profile information, video captions, hashtags, and any biographical details. This data gets added to profiles sold on people search sites. We've found TikTok usernames appearing on sites like Spokeo, BeenVerified, and Whitepages—often linked to real names, phone numbers, and addresses aggregated from other sources.

Third-party data sharing: TikTok shares data with advertising partners, analytics companies, and service providers. While the privacy policy claims this data is "anonymized," researchers have repeatedly shown that anonymized data can be re-identified when combined with other data points. Data brokers purchase this "anonymized" data and use sophisticated matching techniques to link it back to individual profiles.

Cross-platform tracking: Data brokers don't need TikTok to give them your data directly. They track you across the web using advertising pixels, device fingerprinting, and purchase data from other apps and websites. If you use the same email address for TikTok and other services, or if you log in using Facebook or Google, brokers can connect your TikTok activity to your broader digital profile.

Our analysis of data broker profiles shows that social media information appears in roughly 67% of detailed reports, even when users believe their accounts are private or anonymous. The username itself becomes a data point that brokers can use to find other accounts, public records, and associated information.

The Real Solution: Privacy Settings Plus Data Broker Removal

Making your TikTok private is necessary but insufficient. You need a two-layer approach:

Layer one: Maximize TikTok's privacy settings following the steps above. This limits your social exposure and reduces how much new information enters the data broker ecosystem.

Layer two: Actively remove your information from data brokers who already have it. This is where most people stop—they lock down their social media, then assume they're protected, not realizing their information is already circulating across hundreds of data broker databases.

Data brokers don't automatically delete your information when you make your TikTok private. They keep selling the profile they built from your public information, continuously updating it with new data from other sources. A single data broker profile can persist for years, getting sold and resold to background check services, marketing companies, and anyone willing to pay.

The manual removal process is deliberately painful. Each broker has different opt-out procedures, verification requirements, and response times. Some require notarized documents. Others force you to create an account (giving them more data) just to request removal. Many ignore initial requests entirely.

We built GhostMyData specifically to solve this problem at scale. Instead of spending hundreds of hours submitting individual removal requests to data brokers, our platform automates scanning and removal across 1,500+ data brokers—far more than competitors who typically cover 35-500 sites. For TikTok users specifically, we've seen cases where usernames and associated data appeared on 40+ different broker sites, each requiring separate removal.

After any privacy settings change on social media, we recommend running a free exposure check to see how much of your information is already circulating. Most people are shocked to discover their "private" social media usernames linked to their home address, phone number, and family members across dozens of sites they've never heard of.

Lock down your TikTok privacy settings today—every setting listed above. Then address the harder problem: removing the data that's already out there. Privacy settings control tomorrow's exposure. Data broker removal fixes yesterday's mistakes.

Make Your TikTok Account Private: A Quick Guide