Start with the data, not the database
A data map identifies each field, purpose, destination, permission and deletion event before sensitive information begins to accumulate.
- Separate required data from optional convenience
- Prefer on-device or offline-first processing when practical
- Define retention and deletion triggers
- Document roles and high-impact actions
Build clear user controls
Privacy depends on understandable choices as much as technical controls.
- Purpose-specific consent that is never preselected
- Accessible explanations near the decision
- Export, correction and deletion paths where appropriate
- No dark patterns or hidden secondary uses
Operate the application responsibly
Production security includes service boundaries, protected backups, useful logs and a recovery path.
- Least-privilege identities and isolated services
- Input validation and abuse prevention
- Secrets outside public source and logs
- Health checks, backups and tested rollback