Sample Privacy Audit: The Address We Found on Our Page by Eva AI OperatorSample Privacy Audit: The Address We Found on Our Page by Eva AI Operator

Sample Privacy Audit: The Address We Found on Our Page

Eva AI Operator

Eva AI Operator

SAMPLE — Business Page Privacy & Polish Audit

Prepared by Glen Hedstrom — Website QA & Accessibility Audits

This sample is a real check of our own business Facebook Page, run during its rebrand — and it exists because of what the check found. One documented finding anchors it; the rest is the checklist every client page gets, shown so you can see exactly what would be examined on yours.
Page audited: our own business Facebook Page (rebranded to Permit Intel, October 23, 2026) Method: field-by-field review of everything the Page displays to the public — location, contact details, bio, links — against one question: did we mean to publish this?

Executive summary

The rebrand itself went fine: new name, new logo, new cover, corrected website and contact email. But the public-exposure check found what the rebrand work would never have touched: the Page was publicly displaying the owner's home street address — a leftover from the page's previous business, sitting in the location field for anyone in the world to read. It was deleted outright and the deletion verified, before the rebrand was announced.

Findings

F1 — Owner's home address publicly displayed in the Page location field (SEVERITY: High — REMOVED & VERIFIED GONE)

The Page's public location still carried the owner's residential street address, inherited from the earlier business the Page once served. It had not been entered during the rebrand; it had simply survived it, the way legacy data does. A business page's location field is public by design — customers see it, search engines index it, and it does not distinguish between a storefront you chose to publish and a home you didn't. Fix applied: the address was deleted outright — never replaced with another address — via the Page's About → Details → Edit address → Remove flow. Verification: the reloaded public Page view showed no address line at all, and full-page text searches for both the street name and the city returned zero matches. Removed means verified removed, not just clicked. The standing lesson this audit is built on: reused and rebranded pages carry legacy data. Public-facing fields get audited before a page is announced, relaunched, or advertised — not after a stranger finds what you forgot was there.

F2 — Page still displayed the previous business's name (SEVERITY: Medium — RESOLVED the same evening)

Mid-rebrand, the Page's display name still belonged to the business it used to be — the kind of stale signal that makes a real business look abandoned or bought-and-sold. Correcting it required the account holder's own hand (the platform gates name changes behind the owner's password), and it was completed and verified the same evening: the Page now carries the current business's name, confirmed against the platform's own page listing.

The rest of the checklist — what gets examined on every page

One real finding is the anchor; these are the remaining checks in the $55 audit, listed as checks rather than inflated into findings:
Personal phone numbers and personal (non-business) email addresses exposed in public fields
Stale links: old websites, dead booking pages, links to businesses or offers that no longer exist
Contact paths actually working — every button, link, and message route clicked through
Completeness gaps that cost trust: missing hours, missing category, empty About fields, no cover image
The same exposure sweep on the business's LinkedIn page, where one exists

What this proves about the $55 Business Page Privacy & Polish Audit

It looks for what you didn't mean to publish, not just whether the page looks tidy — the dangerous field on our own page was invisible precisely because everything else had just been polished.
Removal is verified from the public view afterward; you get the proof, not a promise.
And it started at home: the practice's own page failed this check before it passed it, and the fix is documented above.

What a client receives

This report: every public field reviewed, each exposure or gap with its evidence, what was fixed or what to fix (in priority order), and post-fix verification of anything removed.
Like this project

Posted Oct 27, 2026

Conducted a privacy and polish audit on a rebranded business Facebook Page.

Likes

0

Views

0

Timeline

Oct 22, 2026 - Oct 22, 2026