Google Business Profile Unauthorized Edits: How They Happen and How to Stop Them

The four sources, in order of how often they actually happen

• Public suggested edits: anyone with a Google account can propose a change from the Maps or Search listing, and some are auto-applied with no human review on either side.
• Third-party apps and integrations: a marketing tool, a listing-sync service, or an old plugin with API access to your profile can push a change you never made directly.
• Another manager or owner on the account, including a former employee or agency whose access was never revoked.
• Google's own systems reconciling data from other sources (your website, directories, user-submitted photos) that disagree with what you entered.

How to tell which one hit you

Start with Business Profile settings → Business Profile → Users and confirm every listed manager is someone you currently trust. If that list is clean, the next most likely source is a suggested edit. Those typically touch one field (hours, category, phone, or an attribute like "takeout") rather than multiple fields at once. Multiple fields changing together, or the primary category changing to something unrelated to your business, points more toward a third-party integration or a deliberate bad-faith edit than a stray public suggestion.

Closing each gap

For public suggested edits, the strongest lever is keeping your profile fully verified and your information consistent across your own website and directories, since verified, consistent listings get more weight against low-quality suggestions. For third-party access, audit connected apps under your Google Account's security settings and remove anything you don't recognize or no longer use. For manager access, review the Users list on a schedule, not just when something goes wrong. An ex-employee's access left in place for a year is not a hypothetical risk, it's a common one.

What you can't fix with a one-time cleanup

Every one of those steps reduces risk. None of them eliminates it, because the suggested-edits system is public by design and will keep accepting new proposals indefinitely. The only way to actually catch the next edit before it costs you a customer is continuous monitoring: something checking the profile far more often than any person reasonably can, flagging or reverting changes within minutes instead of whenever someone happens to log in.

That is the specific gap ProfileWard closes: it watches all ten fields Google lets outside sources touch, alerts you the moment one changes, and restores the correct version automatically where Google's systems allow it.