Privacy guide

Sign in with Google or Facebook: what you are really sharing.

What social login really shares: how "Sign in with Google or Facebook" links your accounts in India, what data flows, and when to use email instead.

The simple answer

Social login lets you skip making a new password by using your Google or Facebook account. It is convenient, but it also creates a link between that big account and the new service.

Depending on what you approve, some profile data can be shared, and the login provider may learn that you use the service. Sometimes a plain email signup shares less.

What to check

1
Review what data the login asks to share before approving.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Prefer email signup for low-trust or sensitive services.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Check connected-apps settings in Google and Facebook.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Remove access for apps you no longer use.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

Convenience links your accounts.

State of Privacy flags identity links because one social login can connect a powerful central account to many smaller services, concentrating data and risk.

What to do next

1
Use email signup when you want less linking.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Audit connected apps in your Google and Facebook settings.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Approve only the data a service truly needs.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

Is social login safe?

It can be convenient and secure, but it links accounts and may share profile data, so review what you approve.

What does the app get?

It depends on what you approve, often basic profile details and email. Check the permission screen.

How do I undo it?

Use connected-apps or security settings in Google or Facebook to remove access you no longer want.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.

Get the template email →
Read the full investigation.

We investigated 107 Indian company websites. The public report shows what we found.

Read the reportTry the experience