Cybersecurity Checklist for Personal Errands & Concierge Services: 10 Essential Protections
As an errand runner, personal shopper, or senior companion, you handle sensitive client information, payment details, and personal schedules. Cybercrime targets small, independent service providers because you often work solo and have less protection. You don't need a tech expert to be secure. About four hours and the right tools can protect your Personal Errands & Concierge Service from most online threats. Here's a simple, ranked list of what truly matters for your business.
READY TO TAKE ACTION?
Use the free LaunchAdvisor checklist to track every step in this guide.
The quick answer
To prevent most cyber issues for your Personal Errands & Concierge Service, focus on these five steps: use a password manager for unique passwords on all client and business accounts, turn on two-factor authentication for your email and banking, learn to spot fake (phishing) emails, keep your phone and computer software up-to-date, and back up client records and schedules automatically. These five steps protect your client's data and your business finances more than anything else.
1. Password manager and unique passwords
Every account your Personal Errands & Concierge Service uses needs a strong, unique password. This includes your scheduling software (like Calendly or Acuity), client management system (like HoneyBook or Dubsado if you use it), payment apps (Square, Stripe, Venmo Business), and any app where you store client contact info or notes. Using the same password everywhere is the quickest way for hackers to get into all your accounts if one gets exposed. Start by using a password manager like 1Password (around $3/month for personal, includes business features), Bitwarden (free for basic, $10/year for premium), or Dashlane. It takes about 30 minutes to set up and will protect your client's privacy and your business finances.
2. Two-factor authentication on critical accounts
Turn on two-factor authentication (2FA) for your most important accounts. This means you need a second code, usually from your phone, after entering your password. Definitely enable 2FA on: your primary business email (Gmail, Outlook), your bank accounts, your payment apps (Square, Stripe, PayPal Business), any scheduling app that clients use, and cloud storage where you keep client files (like Google Drive or Dropbox). If you have a website, enable 2FA on your domain registrar (GoDaddy, Namecheap). Always use an authenticator app like Google Authenticator or Authy instead of getting codes via text message. Text message codes can be stolen more easily. This extra step stops unauthorized access to your sensitive client and financial data.
3. Phishing awareness
Most data breaches for businesses like yours start with a phishing email or text. This is a fake message that looks real, maybe from a "client" with an urgent request, "your bank" about a payment issue, or "Square" asking you to update details. These messages try to get you to click a bad link or open a virus. Watch for: urgent requests you didn't expect, messages asking for your passwords or bank info, or sender names that look a little off (like "Sqware" instead of "Square"). Before you click any link, hover your mouse over it (on a computer) or long-press it (on a phone) to see the real web address. If something feels wrong, don't click. Go directly to the website (e.g., type "Square.com" into your browser) instead of using the link in the email. This protects your client list and your earnings.
4. Automatic backups
Imagine losing all your client lists, service agreements, invoices, and scheduling notes. A ransomware attack can lock up all the files on your computer and demand money to unlock them. Your best defense is automatic backups. You need a separate backup system that isn't always connected to your main computer. Backblaze Personal Backup (around $9/month per computer) is a great option that backs up your entire computer constantly. While Google Drive or Dropbox are good for sharing files, they don't fully protect against ransomware for recovery; if your main files are encrypted, your cloud synced files might get encrypted too. Use a dedicated backup service so your vital client and business records are safe, no matter what.
5. Software updates
Old software has security holes that hackers love to use. This is the second easiest way for them to get into your systems, right after phishing. Make sure automatic updates are turned on for your phone's operating system (iOS, Android), your computer's operating system (Windows, macOS), your web browser (Chrome, Safari, Firefox), and all the apps you use for your Personal Errands & Concierge Service (like scheduling apps, payment apps, or note-taking apps). These updates often fix security weaknesses that were found weeks ago. Running outdated software is an easy target for cybercriminals trying to access your clients' private information or your financial accounts.
6-10. Additional measures by risk level
6. Separate work and personal devices when possible. If possible, use a separate phone or computer for your Personal Errands & Concierge Service work. Mixing work and personal tasks on the same device can put client data at risk if your personal device gets compromised. For example, if you use your personal phone for client texts and calls, consider a second phone line or an app like Google Voice for work-only communications. This keeps your client interactions more secure and organized.
7. Use a VPN on public networks. When you're running errands or waiting between tasks, you might use public Wi-Fi at a coffee shop or library. These networks are not secure. Anyone else on that network could potentially snoop on your internet activity, including login details for your email or payment apps. Always use a Virtual Private Network (VPN) service (like NordVPN, ExpressVPN, around $5-10/month) when connecting to public Wi-Fi. A VPN encrypts your internet traffic, keeping your client communications and business activities private.
8. Enable remote wipe on business laptops and phones. Your phone or laptop holds a lot of sensitive information about your clients and your business. If your phone or computer gets lost or stolen, you need to protect that data immediately. Enable remote wipe features (like Find My iPhone/Mac, or Google's Find My Device for Android/Windows). This allows you to erase all data on the device remotely from another computer or phone. This prevents a thief from accessing your client lists, schedules, or payment app logins.
9. Create a simple incident response plan (who to call if you are breached). Knowing what to do if your Personal Errands & Concierge Service is hit by a cyberattack can save you a lot of trouble and money. Create a simple plan: * **Who to call first:** Your bank, payment processor (Square, Stripe), email provider (Google, Microsoft), and password manager support. * **What to change:** All your passwords, starting with critical accounts. * **What to tell clients:** If client data was affected, prepare a simple message to inform them honestly and professionally. This plan doesn't have to be complex, just a clear list of steps so you aren't scrambling in a crisis.
10. Review account access quarterly — revoke access from former contractors and employees immediately when they leave. Even as a solo operator, you might subscribe to various apps or services. Take 15 minutes every three months to review all the online services you pay for or log into. Make sure you still need them and that your access details are secure. If you ever bring on temporary help or a contractor for busy periods (like the holiday rush), revoke their access to any business accounts (like scheduling software or shared documents) the moment they finish their work. This keeps your client information and business operations secure by limiting who can get in.
RECOMMENDED TOOLS
1Password Business
Password management + breach alerts for teams
Bitwarden
Free password manager — no device or password limit
Backblaze
Automatic computer backup for $9/mo
Some links above are affiliate links. We may earn a commission if you sign up — at no extra cost to you.
FREQUENTLY ASKED QUESTIONS
Do I need to buy cybersecurity insurance?
Cyber insurance is worth considering once you handle customer payment data, store significant customer personal information, or your business operations are heavily dependent on digital systems. For a simple service business with minimal data, your time is better spent on prevention. For any business handling healthcare, financial, or legal data, cyber insurance is essential.
What is the most common way small businesses get hacked?
Phishing emails that trick employees or owners into revealing credentials. Business email compromise (BEC) — where an attacker impersonates a vendor or executive to redirect payments — is particularly damaging and increasingly common. Both are primarily prevented by 2FA and training, not software.
How would I know if I had been hacked?
Common signs: unusual account activity, colleagues receiving emails you did not send, unexpected password reset requests, unfamiliar logins in your account activity log, unexplained charges. Run a breach check at haveibeenpwned.com for your business email addresses.
Apply This in Your Checklist