Think back to the free photo-editing app you tried in 2019. The quiz website that asked you to log in with Facebook. The online store you used once because it had a coupon, and never visited again. You probably don’t remember the passwords — but the accounts are still there, holding your name, your email address, and in some cases a lot more than that.
Most of us have dozens of these forgotten accounts, sometimes hundreds. They’re not hurting anyone while they sit there quietly. The trouble starts when they don’t sit quietly anymore — when the company gets breached, gets sold, or simply lets its security rot while your data is still inside.
Why an account you forgot still matters
Old accounts cause problems in three predictable ways.
First, they get breached. Smaller, older services are breached constantly, and their user databases end up traded and sold. If you reused a password there — and be honest, you probably did on at least one of them — those credentials get tried against your email, your bank, everything. When you check whether your address has appeared in known breaches, the hits are often these half-remembered signups (here’s what to do if yours show up).
Second, they become someone else’s problem. Companies get acquired, pivot, or shut down. Your data moves with them, and you won’t be around to object because you forgot the account existed. The privacy policy you agreed to in 2016 means very little about who holds your data in 2026.
Third, they keep doors open you don’t need. Every account you signed into with Google, Apple, or Facebook left a connection behind. Deleting the app from your phone didn’t remove that access — the permission lives on the account provider’s side, not in the app (this is what “Sign in with Google” actually agreed to).
None of this requires panic. It just deserves an afternoon of tidying, the digital equivalent of clearing out a garage.
Your inbox is the map
Start where the evidence lives: your email. Almost every account you ever created sent you at least one message. In Gmail or your mail app of choice, search for these:
- “welcome” and “verify your account” — catches most signups
- “confirm your email” and “thanks for signing up” — catches the ones the first search misses
- “your receipt” and “order confirmation” — catches the one-time stores
- “trial” and “subscription” — catches the free trials that quietly became paid
Search one term, skim the results, and write down every service you no longer use. Then do the same for your old email addresses, if you still have access to them — the Yahoo or Hotmail address from fifteen years ago is where a lot of the oldest accounts live. A spreadsheet or even a paper list works fine; the point is to stop keeping the whole inventory in your head.
See which apps still have the keys
Before deleting anything, look at the connections your main accounts handed out. This is the step most cleanup guides skip, and it’s arguably the most important one.
On Google: go to myaccount.google.com/permissions (or My Account → Security → Third-party apps with account access → Manage third-party access). You’ll see every service you ever granted access to, and what kind of access it has — some can only see your name and email, others can read your contacts or your Drive files. Anything you don’t recognize or no longer use: open it and choose Remove access. While you’re there, run Google’s Security Checkup too; it surfaces the same list plus signed-in devices and recent security events.
Apple keeps its list under account.apple.com → Sign-In and Security → Sign in with Apple (or on an iPhone under Settings → your name → Sign in with Apple). One quirk worth knowing: Apple groups access by developer, so removing one entry removes it for every app from that developer.
Microsoft’s list lives at account.microsoft.com/privacy/app-access. Facebook’s is under Settings → Apps and Websites.
One honest caveat: revoking access stops future access. It doesn’t erase data the service already copied while it had permission. If you want previously shared data gone, you’ll need that service’s own deletion process — which brings us to the next part.
The directories that skip the scavenger hunt
Every service hides its account-deletion page somewhere different, and most of them hide it on purpose. Two community-maintained directories save you the hunt:
- JustDeleteMe (justdeleteme.xyz) — direct links to the account-deletion page of hundreds of services, each color-coded by difficulty. Green means a simple deletion, yellow means a few extra steps, red means you’ll probably have to contact customer support, and black means the service offers no way to delete at all.
- JustGetMyData (justgetmydata.com) — the same idea, but for downloading your data first. Useful for the accounts you want a copy of before they go.
When a service is rated red or black, don’t give up immediately — but adjust your expectations. Some will delete on request if you email support; for others, the best you can do is strip the profile down (delete photos, replace personal details with blanks) and revoke the account’s access to everything else. An account with no real information in it is a much smaller problem than one with your full profile.
Before you hit delete: three things to grab first
Deleting an account is permanent more often than people expect, so do three quick checks before each deletion:
1. Download anything you want to keep. Photos on an old Flickr or a dead social network, documents on a storage service, playlists — export them first. Google Takeout and Facebook’s Download Your Information exist for exactly this; smaller services usually have an export option buried in settings. Once the account is gone, support won’t restore it.
2. Check what else logs in through it. If you used “Sign in with Facebook” or “Sign in with Google” on other services, deleting the underlying account can lock you out of those too. Switch those logins to a direct email-and-password login first, or move them to a different provider.
3. Save your recovery codes. If the account has two-factor authentication and you’re keeping it open (or even if you’re not sure yet), make sure you’ve saved its backup codes somewhere offline before you change anything (backup codes are the spare keys to your accounts). This is the step people skip, and it’s the one that causes the most panicked support tickets.
Delete or deactivate — know which one you’re clicking
Many services offer both, and the difference is enormous. Deactivation is a curtain: your profile goes invisible, your data stays on the company’s servers, and you can come back by logging in. Deletion is a bonfire.
Facebook is the classic example. Deactivating hides your timeline and pauses everything, but you can reactivate any time and Messenger keeps working. Deleting starts a roughly 30-day countdown during which you can change your mind by logging back in; after that, the account is gone and the full erasure — which Meta says can take up to 90 days — can’t be undone. Messages you’ve sent to other people survive either way.
If you’re sure you won’t be back, delete. If there’s any chance you’ll return — family photos, a marketplace listing, a group you admin — deactivate instead. The worst outcome is deleting in a fit of tidiness and discovering six months later that your only copy of something lived there.
The accounts that should stay open
Don’t close everything. Some accounts are load-bearing, and deleting them creates more trouble than it solves:
- Your main email addresses — everything else’s password resets flow through these (if someone gets into your email, they get into everything).
- Your bank, payment, and tax accounts — obvious, but people do close old payment accounts without downloading their records first.
- Your password manager, if you use one — it’s the inventory for this whole project.
- Your Apple, Google, and Microsoft accounts — these are your device identity; close services inside them, not the accounts themselves.
- Anything tied to a subscription, warranty, or purchase history you might need.
For the accounts you keep, the cleanup still applies — just differently. Instead of deleting them, lock them down: unique passwords, two-factor authentication switched on, and where it’s offered, a passkey, which phishing can’t steal.
The habit that keeps this list short
You’ll never fully prevent account buildup, but you can keep it manageable. The simplest version: when you sign up for something new, add a one-line note in your password manager — “signed up March 2026, free trial, cancel before April.” Once a year, open that note list and the third-party access pages above, and spend an hour pruning.
An afternoon of cleanup now, plus an hour a year after that, is the difference between a digital footprint you chose and one that just accumulated. The old accounts are still out there either way — the question is whether you’re the one deciding what happens to them.
