Choosing what to trust.
WHAT TO ASSESS
What data it will hold or access What permissions it requires Who provides it Whether it is maintained What happens to your data if you stop using it
THE PERMISSIONS QUESTION
Anything requesting more access than its function requires deserves scrutiny.
WHAT TO CHECK
Whether the provider is established Whether they publish security information Whether they have a breach notification process
WHAT TO AVOID
Software from unknown sources Extensions and plugins with no maintenance record Services with no way to export your data
WHAT TO ESTABLISH BEFORE ADOPTING
How to get your data out.
WHAT TO LIMIT
What each service can access.
WHAT TO REVIEW ANNUALLY
Everything connected, and whether you still use it.
WHAT TO REMOVE
Anything unused.
WHY
Every connected service is exposure, maintained by someone else.
