The Ethics of Searching for Someone's Social Profiles

Looking someone up online is so easy that it rarely feels like a decision. You type a name or a handle, open a few profiles and close the tab. Most of the time nothing comes of it. But the same few clicks are also how stalkers find a new address, how harassers find a target's family, and how a bad hiring decision gets made on a namesake's old posts.

This post is about the ethics of searching for someone's social profiles: when it is fine, when it is not, and how to tell the difference before you start. It also covers the legal side in general terms. It is not legal advice, and laws differ a lot between countries and states.

Is it legal to look someone up?

In most places, viewing information that someone made public is legal. Searching a name, opening a public profile or reading a public post is not a crime in itself. The legal trouble starts with what you do next, and with how you got the information. Broadly:

• Using it to harass, threaten or follow someone can break stalking and harassment laws. Every US state has a stalking law, and the federal stalking statute covers a course of conduct carried out online or through electronic communication services, with intent to harass or intimidate, that puts someone in reasonable fear of serious harm or causes substantial emotional distress. The UK's Protection from Harassment Act and similar laws elsewhere work in a similar way.
• Publishing someone's private details to expose or intimidate them, often called doxxing, is a specific offense in some jurisdictions and can fall under harassment laws in others.
• Getting past privacy controls by logging into someone's account, guessing a password or using a stolen session can break computer misuse laws. Fake accounts used to get into private profiles break most platforms' terms and can support a harassment claim.
• Using results for decisions about jobs, housing, credit or insurance brings in consumer reporting laws such as the US Fair Credit Reporting Act. A free search tool is not a background check.

Data protection law matters too. In the EU and UK, GDPR mostly applies to organizations; purely personal or household activity is exempt. A business or researcher collecting profiles on people needs a lawful basis and has to handle that data properly.

Public is not the same as permission

The most common argument for any search is "it's public." That is true and also incomplete. A person who posts a gym selfie, a running route, a workplace badge and a dog's name on four different sites made each item public for a particular audience. Pulling them together into one picture creates something none of those posts were meant to be. Researchers call this aggregation, and it is where most of the harm in OSINT comes from.

So the useful question is not "can I see it?" but "should I combine it, and for what?"

Five questions to ask before you search someone

1. Why am I doing this? Checking that a dating match is real, verifying a seller, looking into an account impersonating you, or authorized work are clear reasons. Curiosity about an ex, a grudge, or "just to see" are not.
2. Would they expect it? A business contact expects you to glance at their professional profile. A person who blocked you expects you to stay away.
3. What is the least I need? If the question is "is this person real?", one matching photo and a video call answer it. You do not need their family tree.
4. What happens if I am wrong? Names and handles are shared. Acting on a mistaken match can hurt an innocent person.
5. Would I be comfortable if they saw my search? If the honest answer is no, stop.

OSINT ethics for professionals

Journalists, security teams and researchers do this work every day, and their standards are a good model for anyone. Guidance such as the Berkeley Protocol on Digital Open Source Investigations, published with the UN human rights office, and the codes used by newsrooms share a few principles:

• Necessity and proportionality. Collect what the task needs and no more.
• Minimize harm. Think about bystanders: friends in photos, family members, people with the same name.
• Document methods. Record where each finding came from and when, so others can check your work.
• Verify before acting. Treat a matching username as a lead, not proof. Confirm with independent signals.
• Secure what you collect, and delete it when the job is done.

Our guides on username OSINT for journalists and username OSINT for beginners put these into practice.

Consent and searching on someone's behalf

The cleanest searches are ones where the person agreed. Helping a parent clean up their accounts, auditing a client's brand handles, or checking a friend's footprint at their request are all fine. Ask first, show them what you found, and let them decide what happens next.

Searching for someone on behalf of a third party is different. If a person asks you to find out where an ex now lives or works, the answer is no, however the request is framed. People who are leaving abusive relationships often depend on not being found.

Partners, exes and children

Three situations come up again and again:

• Partners. Checking a new match is real before meeting is reasonable. Monitoring a current partner's accounts, follows or messages is control, and in some places it is illegal. Our dating app safety guide keeps to the first.
• Exes. If contact has ended, searching for them serves no safety purpose. If you are the one being searched, block, document and report.
• Children. Parents have a real role in their children's safety, and an open conversation about which apps they use does more than covert searches. Our family privacy page covers this.

How we handle this at WhatsMyName Apps

Our tool checks one thing: whether a public profile with a given username exists on 3,165+ sites. It does not search by real name, phone number, email or address, does not show private content, and does not store or log the usernames people search. We publish a responsible-use policy: your own accounts, your brand's, or research you are authorized to do; no harassment, doxxing or stalking; and no use of results for decisions about employment, credit, housing or insurance.

The best use of a username search is the one aimed at yourself. Check your own handle to see what a stranger could connect to it, then tidy up what you find with our digital footprint guide.

FAQ

Is it stalking to look at someone's social media?

Viewing a public profile once is not stalking in the legal sense. Stalking laws generally look at a pattern of conduct that causes fear or distress, such as repeated monitoring, contact after being told to stop, or showing up in person. If someone has asked you to leave them alone, searching for them is a step in the wrong direction.

Can I get in trouble for searching someone's username?

Checking a public username is generally legal. What you do with the results, and whether you bypassed privacy controls, is what matters. Laws vary, so seek local legal advice for a specific situation.

Do people know when I look them up?

Search engines and username checks do not notify anyone. Some networks show profile viewers on certain account types, so assume a visit may be seen.

This post is general information, not legal advice. WhatsMyName Apps is not a consumer reporting agency, and its results must not be used for decisions about employment, credit, housing or insurance.