Protecting against advertising technology

Advertising technology, also known as ad tech, enables and facilitates targeted online advertising. These tools and systems often harvest and distribute internet users’ data, helping build individualized profiles that can be bought, sold, or otherwise obtained by private companies, governments, or other actors.

Research published by CPJ and the Carr-Ryan Center for Human Rights at the Harvard Kennedy School has shown how journalists are at risk at home and in exile from this architecture of mass surveillance and those that harness it.

While tracking from digital advertising technology has become ubiquitous and structural change is needed to address these threats, you can take actions to limit the information gathered through these systems.

Disable your advertising ID and adjust your device and account settings

Note: Sharing your location with an app may mean the location is shared with various third parties as well, the Electronic Freedom Foundation has found.

See these links along with instructions below to help adjust your account settings:

Android

• Turn off ad topics: Settings -> Google -> All Services -> Privacy & security -> Ads -> Ads privacy -> Ad topics -> Off

• Turn off suggested ads: Settings -> Google -> All Services -> Privacy & security -> Ads -> Ads privacy -> App suggested ads -> Off

• Turn off ad measurement: Settings -> Google -> All Services -> Privacy & security -> Ads -> Ads privacy ->Ad measurement -> Off

• Limit location permissions: Settings -> Location -> App location permissions ->  Adjust individual app permission to limit location tracking 

• Limit data shared to personalization index: Settings -> Google -> All Services -> Privacy & security -> Personalize using shared data ->  Adjust individual app permission

• Delete advertising ID: Settings -> Privacy -> Ads -> Delete Advertising ID (on devices running Android 12 or later versions)

Windows 11

• Turn off your computer’s advertising ID: Settings -> Privacy & Security -> General (or Recommendations & offers) -> Let apps show me personalized ads by using my advertising ID -> Off

iOS

• Turn off app tracking: Settings -> Privacy & Security -> Tracking -> Allow Apps to Request to Track -> Off

• Limit location tracking: Settings -> Privacy & Security -> Location Services -> Adjust individual app permission to limit location tracking

• Turn off personalized ads: Settings -> Privacy & Security -> Apple Advertising -> Personalized Ads -> Off

 Google Account

• Turn off saved activity: Google Account page -> Data & Privacy -> Personalization & activity (or History) -> Web & Web App activity -> Off

• Turn off personalized ads: Google Account page -> Data & Privacy -> Personalized Ads -> My Ad Center-> Off

• Limit connections with third party apps and services: Google Account page -> Data & Privacy -> Data sharing -> Third-party apps & services -> Adjust individual app connectivity

Limit tracking from online ad technology

• Use Privacy Badger, a free browser extension from the Electronic Frontier Foundation, to block advertisers and other third-parties from tracking you and your online activity.

• Use other ad blockers to reduce the number of ads you are shown, curbing your devices’ engagement with the digital advertising ecosystem and the amount of data being collected about you. Ad blockers only work on your internet browser, not within apps themselves.

• Be mindful of the apps you choose to download, especially when those apps request or require location sharing, as they may contain software development kits (SDKs) that may be collecting sensitive data that can be shared and sold. Tools like Exodus or App Microscope can help to reveal privacy concerns associated with specific apps.

Remove your data from the internet

• Use free, open source resources like CPJ’s guide to removing personal data from the internet, BADBOOL, the glamrock data-broker to manually request your data be removed from various online data brokers and public databases. 

• Private companies like Brightlines, DeleteMe, and others offer paid services to handle removal requests and other methods of deleting your data from data brokers and other sources. Be mindful that these companies may take up to 30 days to delete your information.

Protect personal data and guard against other digital threats

Doxxing: Use the NYT’s Guide to doxxing yourself on the internet and other tools to see how much of your data is already available online so you can determine your current risk profile and next steps to minimize your exposure or remove your data.

Ad-delivered spyware: Review CPJ’s specific guidance on defending against spyware.

Online harassment: Review the CPJ guide on protecting against and responding to online abuse.

To speak directly with CPJ’s Emergencies team, enquire about safety advice or training for you or your news organization, or for other assistance, please email us at [email protected]. Additional physical, digital, and mental health safety resources can be found on the CPJ Emergencies homepage.