The Core Problem
You spend hours perfecting your bullet points, but you ignore the header. In the cybersecurity world, uploading a standard resume to a public board (Indeed, Monster) is called "doxing yourself for a paycheck."
1. The Threat: The "Mosaic Effect"
Bad actors use automated scripts to scrape millions of resumes. They aren't looking for Java developers; they are looking for data points to build a "synthetic identity."
Fig 1. One piece of data isn't dangerous. But combined, they unlock your digital life.
2. The Purge: What to Delete Immediately
The Full Home Address
There is zero reason for a recruiter to know your apartment number. A specific address allows bad actors to confirm your physical location for swatting or sophisticated scams.
Date of Birth & Photo
Your DOB is the "master key" for identity verification in banking. Never put it on a PDF. If a portal requires it, use the secure form field only.
3. The "Burner" Strategy
If you are posting to a public board where anyone can download your PDF, do not use your primary contact channels.
VoIP Number
Use Google Voice. Protects you from SIM Swapping and recruitment spam.
Email Alias
Create firstname.jobs@gmail.com. Keep your banking email secret.
4. The Hidden Danger: File Metadata
Even if you delete the text, the file remembers. Word Docs and PDFs embed "Author Name" (is it your parent's computer name?) and revision history.
How to Scrub It
In Word: Go to File > Info > Check for Issues > Inspect Document. Select "Remove All" for Document Properties.
Always export to flattened PDF. Never upload .DOCX.
The Bottom Line
A legitimate recruiter only needs to know what you can do and roughly where you are. They do not need to know where you sleep. Keep your PII private until the contract is on the table.