Somewhere between 2008 and now, “I care about my privacy” became code for “I think the government is reading my mail.” The reframe was so complete, so thorough, that most people don’t even notice it happened. You bring up data collection at dinner and someone gives you the look. You know the look. The one that says oh, we’ve got a tinfoil hat situation here.
That reframe didn’t happen by accident.
1. Nobody calls you paranoid for locking your front door. Nobody questions your mental stability because you close the bathroom blinds. Those are just things you do, because private space has inherent value regardless of whether someone is actively trying to violate it. The moment that logic gets applied to digital behavior, suddenly you’re a conspiracy theorist. The only meaningful difference is that one threatens a business model and one doesn’t.
2. The “if you have nothing to hide, you have nothing to fear” argument is not a good-faith argument. It is a thought-terminating cliché designed to end the conversation before it starts. It would not survive thirty seconds of serious application. You have nothing to hide in your medical records, your therapy sessions, your browser history, your financial struggles. But you still close the door.
3. Here’s the part nobody says out loud: the companies collecting your data are not doing it to serve you better. That’s the marketing layer. They’re doing it because behavioral data is the product, and you are the raw material. The service is free in the same way a fishing lure is free. The worm didn’t sign a terms of service either.
4. I work in IT. Have for a long time. And I can tell you from experience that data collected “just to improve the product” has a way of becoming data used for things nobody mentioned during onboarding. It sits in a database. Databases get breached. Companies get acquired. Policies change. That data you handed over in 2017 to some app that doesn’t exist anymore is still floating around somewhere, connected to your name and your behavior and your location history. Most outages start with “this should be a small change.” Most data exposures start the same way.
5. The social cost of caring about privacy is real and it is manufactured. When early adopters of privacy tools got labeled as weirdos, it became socially expensive to care. That’s not an accident of culture. That’s a predictable outcome when the entities who benefit most from surveillance also happen to control large portions of the media landscape and the public conversation about technology.
6. Being loud about privacy is not the same as being effective about privacy. The people who perform the most visible outrage about data collection often use the same six apps that collect the most data. Meanwhile, the people quietly running Pi-hole on their home network and thinking carefully about what they install don’t post about it much, because they’re busy actually doing the thing. I respect the second group. I am skeptical of the first.
7. You do not have to be a hacker, a paranoid survivalist, or someone with a manifesto to decide that your browsing habits are your business. You just have to be a person who prefers to own their own things. That’s it. That’s the whole bar. It is not complicated. It got complicated on purpose.
The hygiene analogy isn’t perfect but it’s close enough to be useful. Nobody needs a detailed threat model to justify washing their hands. They just don’t want to be dirty. Somewhere along the way we decided that applying that same basic instinct to your digital life meant something was wrong with you.
Nothing is wrong with you. Something is wrong with the framing.