Pattern
Connected apps can retain access to sensitive accounts and data after their original purpose has ended.
Practice
Regularly review external apps, integrations, and services authorized to access accounts that hold sensitive data. Remove access that is unused, excessive, or unclear.
Start small
Open the connected-apps page for one important account and remove one integration you no longer use.
Watch out
Disconnecting an integration can stop an automation, backup, or shared workflow. Check what it does before removing its access.
Related practices
Concepts
- digital hygiene
- Recurring maintenance keeps the digital footprint legible, private, and recoverable.
- minimal retention
- Data and digital residue are kept only while they continue to serve a deliberate purpose.