Shared accounts and location after a breakup: regain privacy without increasing risk

A shared life creates dozens of digital connections: a family phone plan, live location, photo albums, calendars, Wi-Fi, television accounts, cars and smart-home devices. After an amicable separation, these can be divided using a checklist. In a relationship involving control, threats or violence, abruptly removing access may alert the other person, destroy evidence or trigger escalation.

There is no single safe order for everybody. The aim is not to press every “sign out” button as quickly as possible. It is to regain control in a way that fits the physical, legal and family situation.

If your health or life is in immediate danger, call your local emergency number. If you are in Poland, call 112. Poland’s “Blue Line” domestic-violence support service is available at 800 120 002, but it is not an emergency line. If you suspect that your phone is monitored, seek information and help from a device the other person has never accessed.

The central rule: physical safety comes before tidy settings

The natural reaction is to change every password, remove devices and disable location immediately. In an ordinary separation, that may be appropriate. If the other person is violent, tracking you or forcing access, a visible loss of control may change their behavior.

Changing settings may send an email, sign-out notice or other alert. Deleting an app or factory-resetting a phone may erase material needed by police, a lawyer or a support organization. Before making visible changes, consider whether you have a safe place, documents, money, transport and a person who knows what is happening.

This is not an argument for leaving access open indefinitely. It is an argument for a plan. A domestic-violence support organization can help determine which steps to take now, which to take after reaching another location and which to delay until evidence is preserved.

Stage 0: use a safer device and preserve facts

If a former partner knows the contents of conversations, exact location or actions you never shared, assume that the current device or account may not be private. Do not use it to research an escape plan, new address, lawyer or support line. Use a trusted person’s phone, a library computer, an employer device within company rules, or a new device that is not linked to old accounts.

Record dates, messages, sign-in alerts, photographs of devices and events that suggest monitoring. Keep a copy somewhere the other person cannot access. Do not provoke a confrontation or investigate who installed an app or tracker yourself. Documentation should support safety, not replace help.

If a phone may contain stalkerware, merely searching its apps can be visible. A factory reset may remove some monitoring software, but may also destroy evidence; restoring a complete backup may restore unwanted settings. Discuss that decision with somebody who understands both technology safety and domestic abuse.

Stage 1: map shared access

Do not begin with whichever app happens to be open. List the places where the other person may see data, reset credentials or control devices:

• primary email and recovery addresses;
• Apple or Google accounts, signed-in devices and family groups;
• phone number, eSIM, carrier account and family plan;
• password manager, saved passwords and passkeys;
• banking, joint accounts, cards and payment apps;
• Maps, Find My or Find Hub, location sharing and location history;
• messaging, social media, calendars and shared contacts;
• cloud drives, photo albums, backups and documents;
• home Wi-Fi, cameras, alarms, locks, speakers and administrator accounts;
• cars, manufacturer apps, trackers and roadside services;
• children’s accounts, school, healthcare and family safety features;
• shopping, delivery, transport and hotel accounts that store addresses.

This list does not mean everything must be disabled on one day. It exposes dependencies. A new email password offers little protection if the other person controls its recovery number. A new phone is not private if it signs in to an old cloud account somebody else can still access.

Stage 2: build an independent identity core

From a safer device, create a private email address you have never used and whose name the other person cannot guess. Use a unique password and strong multi-factor authentication. Do not add a shared number or old mailbox as recovery. Store recovery codes away from the potentially monitored device.

Establish who owns the phone number and primary carrier account. A family-plan administrator may see billing information and, depending on the service, manage account features. If you need a new number or device, ask the carrier for an approach that does not send documents to a shared address or alerts to the old account.

Then secure primary email, the Apple or Google account and the password manager. Change passwords, recovery channels and trusted-device lists in the order set by the safety plan. Removing a device is not enough if the other person knows the new password, can read the mailbox or can take over the phone number.

For joint bank accounts, do not remove access or move money without understanding the legal and financial consequences. Contact the bank independently and ask how to separate access and correspondence safely. Urgent protection against an unauthorized transaction is different from dividing jointly held assets.

Stage 3: review location in several layers

Turning off a location icon does not end every kind of sharing. Location may be visible through an Apple or Google account, Maps, messaging, photo albums, fitness apps, a vehicle, a carrier family account or a physical tracker.

On an iPhone running iOS 16 or later, Safety Check in Settings can review people, apps and devices with access and can use Emergency Reset to stop sharing. Apple explicitly advises considering safety risks before making changes. Safety Check cannot inspect non-Apple accounts or every setting on other devices.

Google Location Sharing is linked to both accounts and devices, so review the people and settings on every device you use. Separately inspect app location permissions. Stopping live sharing with a person is not the same as removing an app’s right to use GPS.

Review shared albums and photo metadata, automatic fitness-route posts, saved home and work addresses, ride history and deliveries. Ask trusted contacts not to tag you in real time or disclose a new address.

Stage 4: separate data without accidentally destroying it

A shared album, drive or calendar may contain children’s photos, documents, receipts and evidence. Before leaving a group, establish what you are allowed to copy, what you need and whether deleting an item removes it for others. Do not assume “delete for me” has the same effect in every service.

Change home Wi-Fi and router administrator passwords only if you have the right to do so and it is safe. Review camera, alarm, lock and smart-speaker accounts. A device may maintain its own user list independently of the primary phone account.

If a former partner had access to work email, hardware or customer information, tell the employer. Do not erase traces on company equipment yourself. IT may be able to protect the account and preserve logs without requiring more personal detail than necessary.

Stage 5: expect attempts to regain control

Password-reset messages, sign-in codes, calls from a supposed carrier or requests from acquaintances for the new number may follow. Do not approve actions you did not initiate. Tell a small group of trusted people how to verify contact, without broadcasting the plan widely.

Check whether security questions have answers a former partner knows. Where a service permits it, use random answers stored in a password manager. Avoid shared dates, pet names and addresses. Review passkeys and connected apps as well as the password.

Create a simple plan for losing the new phone: who holds a copy of recovery codes, how you will reach the bank and which device is trusted. Privacy recovered today must survive tomorrow’s equipment failure or account-takeover attempt.

What the sources confirm, and what Breachroad recommends

Apple describes Safety Check as a way to review and stop sharing, manage devices and update account security. Apple also says to plan for safety before removing access. Google explains how to manage Location Sharing and notes that settings may need review on each device. The Safety Net Project warns that visible changes can trigger escalation or erase evidence and recommends using a safer device. For people in Poland, the emergency and “Blue Line” numbers above are confirmed by the Polish government.

The five-stage order, access map and independent identity core are Breachroad recommendations. They do not replace an individual safety plan, legal advice or domestic-violence support. A technical setting is only one part of the situation. Our identity-theft protection guide covers additional account and document risks. We teach organizations to respond to human security incidents without blaming the affected person through cybersecurity training.