The short answer
You can leave an SEO agency or freelancer without losing your rankings, provided you take back control of everything that belongs to you before you give notice. The real risks are not mysterious ranking penalties. They are an agency that still owns your Google Business Profile, your domain, your analytics, or the tracked phone number printed on every directory listing. Secure those, record where you stand, and the leaving itself is uneventful.
A situation we see often
A post on r/SEO this month captured it. A business owner had paid a one-person SEO for three years. Early on it worked: rankings for two keywords in two cities. Since December 2025, qualified leads had dried up, the contact form filled with spam, and monthly reporting amounted to a couple of Google Business Profile posts. When the owner raised cancelling, the freelancer threatened to take on a local competitor and outrank them. The question was whether the freelancer could sabotage the site on the way out.
The honest answer is: only through what they still control. So start there.
What a departing SEO can actually damage
| Asset | Risk if they control it | What to do |
|---|---|---|
| Google Business Profile | Edits to hours, phone, website or categories; removing you as a user | Make your business account the primary owner, then downgrade or remove them |
| Domain registrar and DNS | Redirects, email disruption, the site going offline | Move the domain to an account you own; enable two-factor authentication |
| Hosting and CMS admin | Content changes, noindex tags, deleted pages, injected links | Change passwords, remove their users, revoke application passwords and API keys |
| Search Console and GA4 | Loss of history, removal requests | Confirm you are an owner, then remove their access |
| Call-tracking numbers | The number on your profile and directories stops ringing your business | Find out who owns the numbers; port them or replace them everywhere |
| Links they built | Links on sites they control can be removed | Get a list; accept that rented links may disappear |
| Content on their platform | Landing pages or microsites vanish | Export and rebuild on your own site |
The call-tracking row is the one most owners miss. Many local SEOs put their own tracked number on the Business Profile and across directories, so they can report calls. If that number belongs to their account, leaving can quietly cut off your phone.
What they mostly cannot do
Negative SEO rarely works. Pointing spammy links at a site used to be a feared tactic. Google has said for years that its systems largely ignore such links, and for most sites a sudden batch of junk links has no measurable effect. It is worth monitoring, not losing sleep over.
Working for a competitor is usually allowed. Unless your contract has an enforceable restriction, a freelancer can take on another client in your area. They cannot use your confidential data to do it, and they cannot keep control of your accounts.
The work on your site stays. Content, technical fixes, page speed improvements and internal links belong to the site. If rankings fall after an agency leaves, it is usually because rented links were removed or because a problem that had been hidden simply surfaces.
The checklist: before you give notice
- Read the contract. Notice period, minimum term, who owns the work and the accounts, and any non-compete.
- List every account. Domain, DNS, hosting, CMS, Business Profile, Search Console, GA4, Tag Manager, ad accounts, call tracking, review platforms, directories.
- Confirm you are the owner of each. Not a user they added: the owner, on an email address your business controls.
- Export your history. Search Console performance data, GA4 reports, and a ranking snapshot for your main terms. You need a before picture.
- Ask for the work log. Pages changed, content published, links built and where, citations created and with which login.
- Check who owns the phone numbers.
The day you give notice
- Change every password they know, and enable two-factor authentication on each account.
- Remove their users from the CMS, hosting and Business Profile, or downgrade them to the lowest role for the notice period.
- Revoke application passwords, API keys and any plugins they installed for remote access. A current reminder: in August 2026, the developer of a rival plugin publicly alleged that Rank Math's support section created WordPress application passwords inheriting the opening user's admin rights. Whatever the outcome, audit what can log in to your site.
- Put the notice in writing, with the handover you expect.
The ninety days after
- Watch the Business Profile for suggested edits and changes. Tools such as BrightLocal or Local Falcon can alert you.
- Check Search Console weekly for coverage drops, manual actions, or a spike in new linking domains.
- Compare rankings and leads with your snapshot. Normal volatility is a few positions. A cliff means something changed.
- Fix the spam on your contact form with a honeypot field or a bot check. Spam submissions make lead reporting meaningless.
If leads dried up while traffic continued, the problem may not be SEO at all. We work through that in traffic but no leads.
So it does not happen again
Every account in your business's name from day one, with agencies added as users. Monthly reports that show the work done, not just the rankings. A contract that states you own everything created. Our guide to owning your domain, hosting and code and the contract checklist set this out in full. For the Business Profile side, see how AI picks a local business.
If you are mid-exit and want someone to audit what you are taking back, get in touch.