Guide
How to delete old online accounts you no longer use
Every account you stopped using is still there. The shop you ordered from once in 2019, the free trial you never converted, the forum you joined for one question. Each of them keeps your email address, often your name and postal address, sometimes a saved card and a password you may have reused elsewhere. You are not using them, but they can still leak. Deleting them is the cheapest security win you have.
Step 1: make the list
You cannot delete what you cannot remember. The good news is that almost every service sent you an email the day you signed up, so your inbox is the most complete record of your accounts. In Gmail, run these searches one at a time:
- subject:(welcome OR "confirm your email" OR "verify your email") finds sign-up confirmations.
- subject:("reset your password" OR "password reset") finds accounts you logged into at least once more.
- subject:("new sign-in" OR "new login" OR "security alert") finds the services that track logins.
- subject:(receipt OR invoice OR "order confirmation") finds every shop that has your address.
Write down each sender once, with the date of the latest email. Anything you have not heard from in two years is a strong candidate for deletion. If going through years of search results by hand sounds tedious, HealthInbox builds this list for you from your email headers, without reading the content of any message.
Step 2: decide what to do with each one
- Still useful: keep it, but change the password if it is reused, and turn on two-factor authentication.
- Paid but unused: cancel the subscription first, then delete the account. Deleting an account does not always stop the billing.
- Not used in years: delete it.
- Unsure: log in, remove the saved card and the postal address, and come back to it in six months.
Step 3: delete the account properly
Look for the option in the account settings, usually under Privacy, Security or Account. The wording varies: "Delete account", "Close account", "Deactivate". Watch the last one. Deactivating often hides your profile but keeps your data, so look for the permanent option. Before you confirm, download anything you want to keep, such as invoices you may need for taxes.
If you cannot log in any more, use the password reset first. If the email address on the account no longer works, contact support from the address you can still prove you own.
Step 4: no delete button? Use your right to erasure
Some services make deletion hard on purpose. If they operate in the European Union or serve people who live there, the GDPR gives you the right to have your personal data erased (Article 17), and the service has one month to answer (Article 12). Send a short message to their privacy address, usually listed in their privacy policy:
Subject: Request for erasure of personal data (GDPR Article 17)
Hello, under Article 17 of the General Data Protection Regulation, I request the deletion of my account and of all personal data you hold about me, associated with the email address [your address]. Please confirm the erasure within one month of receipt, as required by Article 12(3) GDPR. Kind regards.
HealthInbox has a "Copy GDPR request" button on each account that fills in this text with the service name and your address, ready to paste.
Step 5: close the loop
- Keep the confirmation email. If the service emails you again later, you have proof you asked.
- Change the password anywhere you reused the one from the deleted account.
- Repeat the audit once a year. New sign-ups pile up faster than you think.
Most people find dozens of accounts they forgot. HealthInbox lists every service tied to your Gmail address and flags the ones you have not used in years, privately and on your device.
See how HealthInbox finds them