Building a Personal CRM Without Becoming a Stalker: The Ethical Guide

The Analog Paradox

My grandmother has a small leather address book. In it, she's written not just phone numbers, but notes: Margaret, met at book club, terrible knees but extraordinary laugh, son is a doctor in Edinburgh, birthday March 14th, prefers tea to coffee. She's been doing this for forty years, and no one finds it strange. 

But suggest to that same person that you're using an app to track relationship details — who you met, how, what their kids are called, what they mentioned last time you talked — and something shifts. Suddenly, it seems calculating, manufactured, and forced. 

Why? 

Why the Discomfort Is Real (And Mostly Misdirected)

When someone describes their personal CRM with language like "I'm tracking all my connections," or "managing my relationships," or – and I've heard this one – "optimising my network," there's a real problem. It becomes relationship extraction instead of management. It’s less about pure interest in the person, and more in what they can do for you. 

Some people have wide networks. Clients, collaborators, people you meet at conferences, friends of friends. You might remember faces, remember projects easily. But ask you what your client’s father was recovering from when you last spoke three weeks ago? You'll draw a blank (and probably feel terrible about it). 

You might have one of those brains that excels at abstract systems and project details, but you do not have a brain that files away personal details without effort. This isn't a character flaw. It's just how your cognitive architecture works.

A personal CRM isn't about changing who you are. It's about building scaffolding around a genuine limitation so you can actually show up as the person you want to be — someone who remembers that your client’s dad was in hospital, and asks about him next time.

Where the Ethical Lines Are

If you're going to track relationship information, you need real rules. Not because apps are inherently unethical, but because human brains are very good at drifting toward extraction when they have a tool that makes extraction easy. 

1. First rule: Don't track anything you haven't been directly told or don't already know from the relationship.

If someone tells you their kid's name is Emma, write that down. If you met them through a friend at a conference in 2019, note that. If you remember that they mentioned struggling with anxiety, include it. But don't go searching their social media for additional details. Don't stalk their LinkedIn to see where they worked before. Don't add information they didn't volunteer to you directly. The moment you move into external research, you've crossed from "I'm remembering what I know" into "I'm collecting data," and those are different things.

2. Second rule: Don't share these notes without explicit consent, ever.

Your personal CRM is yours. It's not a system for making someone else look good or extracting value from someone by "knowing" things about them. Keep it private. If you ever feel tempted to mention to someone "I have a note that you mentioned…," stop and ask yourself: Am I doing this to be helpful, or am I doing this to prove I remembered? If it's the latter, don't mention it.

To that end, making sure your personal CRM is one hundred percent private and secure is crucial. Thinkspan is fully end-to-end encrypted, so you don’t need to worry about your notes on another person ever getting leaked in a data breach.

3. Third rule: Don't optimise relationships the way you'd optimise a sales funnel.

This is the line that matters most: You're allowed to track what you know about people. You're allowed to organise information so you remember birthdays. You're allowed to note what someone's going through so you can ask about it later. What you're not allowed to do is treat that information as a resource to be leveraged. You can't start thinking, "Andie's struggling with anxiety, so if I'm helpful now, she'll owe me later." You can't view remembering details as a technique for building dependency or obligation. The moment you start doing that, you've moved from genuine care into manipulation, and no app is going to make that ethical.

When building a personal CRM, examine your motivation for doing so: Are you doing this because you genuinely care about these people and your memory is failing you? Or are you doing this because you've read that successful people "network strategically" and you want to get better at extracting value from your relationships?

What to Track, What Not to Track

Let's get practical.

Track this: How you met them. Birthdays and anniversaries. What they do for work. Significant life events they've mentioned (new baby, new job, health issue, big project). What they seem to care about. When you last connected and what you talked about. If they have a preferred contact method. Anything they've explicitly told you.

Thinkspan is great for keeping all of those different pieces of information organized. You can connect someone to their birthday, notes, photos, even reminders – a great one if you need to remember to buy a birthday card! 

Don't track this: This one’s easy: anything they'd be uncomfortable knowing you'd recorded.

Here's a good test: If you felt strange about telling them "I've written down what you told me about your dad's surgery," you shouldn't have written it down. If you feel fine about it — "Yeah, I mentioned that to you and I appreciate that you remembered" — then you're in the right zone.

When to Delete

This is the part most people miss. A personal CRM isn't a permanent archive of everyone you've ever met. It's a working file.

If someone explicitly asks you not to contact them, delete your notes on them. If you realise you haven't thought about someone in three years and don't miss them, consider deleting their entry. If a relationship ends badly, you might delete the notes — not because you're trying to erase them, but because keeping detailed notes on someone you're no longer in contact with starts to feel stalkerish, and it's also painful to reread.

The point of a personal CRM is to help you stay connected to the people who matter. If someone no longer matters, or you're not able to be in contact with them, the notes stop being useful.

Grandmother's Lesson

My grandmother's address book wasn't not-strange because it was small and old. It wasn't not-weird because she wrote things down by hand.

It wasn't strange because, crucially, the system served the relationships. She didn't have her address book so she could optimise her social standing. She didn't share it to prove how well-connected she was. She didn't use it to manipulate people.

She had it because she loved people, and she wasn't always good at remembering their birthdays, so she gave herself a tool to remember. And because she loved them, she treated the information with care.

A digital version isn't inherently worse. A system that's encrypted, that lives on your device, that only you can see – that might actually be better. You've removed the risk of your notes ever being sold or shared or weaponised.

The technology is neutral. The intent is what matters. Build a system that helps you care better, and then use it that way.

‍