Social media platform dependency risk for businesses

Key takeaways

You rent your social audience and the landlord can change the terms without notice. Measure your exposure by asking what share of enquiries would disappear if one account vanished tomorrow, then reduce it with owned channels rather than more social channels.

• Exposure test: what share of enquiries depends on one account you do not own?
• Over 50% from one platform is a genuine business risk, not a marketing one.
• A second social channel does not reduce the risk. An owned channel does.
• Export your data and contacts regularly. Most businesses never have.
• Secure the account properly. Most suspensions and losses are avoidable.

What is platform dependency risk?

The risk that a business loses access to its customers because a third party changed something. It takes four forms: an algorithm change that reduces reach, a policy change that restricts your category, an account suspension, and a platform declining or closing.

All four have happened to UK businesses, and none of them come with notice or a useful appeal process. The relevant question is not whether it will happen but what share of your revenue would be affected when it does.

• Choose the right social media platforms for a UK small business

How exposed is your business?

Answer five questions honestly. The result is usually more alarming than people expect.

• What share of enquiries came from one platform in the last 6 months?
• Could you contact your customers if that account disappeared today?
• Do you hold customer contact details outside the platform?
• How many people can access the account, and is recovery possible if one leaves?
• Have you ever exported your data from it?

• Email vs social media: which deserves your marketing hours?

Why does a second social channel not help?

Because it carries the same category of risk and, frequently, the same owner. Two accounts under one corporate parent can be suspended together, and both are subject to the same kind of policy and algorithm change.

Diversification only works across different kinds of risk. An email list, a customer database and a website you control are genuinely different, because nobody can suspend them. That is why the mitigation for platform risk is owned channels rather than more channels.

• Can a business succeed with only one social platform?

How do you secure the account itself?

Most account losses we see are avoidable and have nothing to do with policy. Turn on two-factor authentication, make sure more than one trusted person has administrator access, and never tie the account to a personal profile that could be lost.

Keep the recovery email and phone number current, and check them annually. A business locked out because the recovery email belonged to a member of staff who left three years ago is a remarkably common and entirely preventable situation. The NCSC's small business guidance covers the basics well.

• Website security for small businesses

What should you do about your data?

Export it on a schedule, and hold customer contact details outside the platform. Most platforms allow a full export, and most businesses have never run one.

Under UK GDPR you are responsible for personal data you hold inside a platform account, so the export is also good practice for your records. Store it where your other customer data lives, apply your retention policy, and diary the next export for six months' time.

• Data security with an outsourced team

What does this look like in practice?

A UK vintage clothing seller took around 80% of orders through one social account with roughly 30,000 followers and no email list. The account was suspended in error and took eleven weeks to recover, during which the business had no way to reach a single customer.

It survived on savings. Afterwards, an email list was built from order records and now carries a meaningful share of sales independently. The lesson cost a quarter's revenue and was entirely preventable with an afternoon of work beforehand.

• See client work

How do you turn followers into contacts?

By giving people a reason to hand over an email address or start a conversation, repeatedly and without apology. Nobody joins a list because you have one.

The reasons that work are specific and immediate: first access to availability, a price list, a checklist you would otherwise be asked for, or being told when something is back in stock. A monthly newsletter is not a reason.

Do it continuously rather than as a campaign. Converting even a small share of your audience each month compounds, and after a year you have something nobody can suspend, which is the only real answer to platform risk.

Track the number monthly alongside your follower count, because it is the figure that actually reduces your exposure.

Make the ask part of your normal posting rhythm rather than a campaign, so it keeps working in the months when nobody is thinking about risk.

Next step

Work out what share of your enquiries came from one platform last quarter. If it is over half, spend this month building a way to contact those customers directly, because you currently cannot.