When your immigration status is precarious¶

For most people the data trail their life leaves off is a commercial nuisance: profiles sold, ads targeted, the occasional breach. For someone whose right to remain is uncertain, an asylum seeker, a person on a temporary or conditional visa, someone undocumented, the same trail can help decide whether they are allowed to stay. That changes the calculation. The adversary is no longer only advertisers and brokers. It includes the immigration apparatus of the state, the services that quietly share data with it, and sometimes people in a person’s own community.

The general privacy guidance on this site still applies, but only as far as it goes. Jurisdictions differ enormously, and the right move depends on a specific situation that only a regulated immigration adviser or a legal-aid organisation can weigh properly.

The public trail becomes evidence¶

What is posted in public is increasingly read by states as part of a decision about a person. The United States now asks visa applicants to list every social media handle used over the previous five years, and has required some applicants to set their profiles to public so they can be reviewed. Other states run their own versions of the same practice. A years-old post, a photograph, an association, or a deleted-then-recovered account can become part of a file that outlasts the moment it was made.

The useful posture is not to scrub a history clean, which is both hard and conspicuous, but to be deliberate from the start about what is attached to a real name. The keeping identities separate playbook covers holding a public-facing presence apart from a private one.

The device at the border¶

Many states can examine, and copy, the contents of a phone at the border, sometimes without the safeguards that apply to a search anywhere else. For someone whose status is under review, that device holds not only their own life but their contacts, their messages, and the people connected to them.

There is a trap here worth naming. A phone visibly wiped just before a crossing can read as concealment and invite more scrutiny. What holds up better is a device that is genuinely minimal, an everyday phone that simply does not carry much. The travel devices playbook covers preparing such a device, and the device seizure runbook covers what happens if one is taken.

Data that crosses between services¶

One of the sharper risks is not surveillance aimed at a person but ordinary data moving sideways. A pattern sometimes called the hostile environment turns everyday services, healthcare, schooling, housing, banking, into points where information can pass to immigration enforcement. Whether that sharing happens, and with what limits, varies by country and changes with the political weather. The practical implication is that it is worth knowing, for the place you are in, which interactions carry that risk before assuming any of them are neutral.

The people around you¶

Not every threat is institutional. Communities under pressure are also watched from within, through informants, through associates, and sometimes through family. This is uncomfortable to plan around, but it shapes what genuinely stays private. Sensitive conversations belong on an end-to-end encrypted channel where the provider cannot read them and so cannot be made to produce them; the encrypted messaging playbook covers moving to one. The broader work of shrinking what is known is in the minimise playbook.

Where this sits¶

The mechanics of how states collect and combine this information are described in the surveillance threat model. The difference here is not the mechanics but the stakes: the same collection that is a background hum for most people is, for someone whose status is insecure, load-bearing. That asymmetry is the point, and it is why generic advice has to be read against a specific situation.

Last reviewed: 2026-07-09.