Privacy isn't about hiding

What it is

“I have nothing to hide.” You’ve heard it. Maybe you’ve said it. It sounds reasonable — if you’re not doing anything wrong, what’s the problem?

Here’s the thing: privacy was never about hiding. You close the bathroom door. You seal the envelope before you mail it. You’d be unsettled if a stranger at the next table wrote down everything you said at dinner — not because the conversation was scandalous, but because it was yours.

That’s all privacy is: the ordinary dignity of deciding who gets to know what about you. Nobody asks you to justify the bathroom door. The internet is the only place where wanting a door at all gets treated as suspicious.

Why it’s a problem

The reason this matters online is that someone built a business on the missing door. Most “free” apps and services make their money by collecting what you do — where you go, what you read, who you talk to, what you almost bought — and selling access to the profile.

The mechanics are simple and everywhere: apps ask for permissions they don’t need, identifiers built into your phone stitch your activity together across companies, and the resulting profile is bought, sold, merged, and enriched by brokers you’ve never heard of and never agreed to. None of it requires you to do anything wrong. Using a flashlight and a map is enough, because the collection isn’t a side effect — the collection is the product.

What it costs

This isn’t hypothetical, and the receipts are public.

A flashlight app — a flashlight — was caught transmitting users’ location and device IDs to ad networks, and settled with the FTC over it. Tens of millions of people lit up a dark room and became entries in an advertising database. When the Associated Press investigated in 2018, they found Google services storing location history even for users who had explicitly turned “Location History” off. The switch said off. The file said everything.

And the file has consequences. Profiles decide which prices and offers you see, which ads follow you for months, and what an insurer, employer, or data-broker customer can quietly learn about you. Once collected, the data outlives your intent: it gets breached, subpoenaed, and resold, and there is no switch that un-spills it.

None of the people in those stories were “doing something wrong.” They were using a flashlight and a map. The door was just missing — and doors, it turns out, are mostly settings. The playbooks below install them, one tap at a time.