"I have nothing to hide" is the most effective sentence ever written against your own privacy, and you say it about yourself.

It sounds like confidence. It is a category error. The sentence assumes privacy is about hiding wrongdoing, so if you have done nothing wrong you need none of it. That is not what privacy is. Privacy is leverage: control over who knows what about you, and when. You give that leverage away for free and only notice the day someone uses it.

You already hide things, you just call it normal#

Run the list and be honest:

  • You took an e-card sick day you were not really sick for. Your boss does not know which one.
  • You trash-talked someone in a chat you assumed was private.
  • You make edgy jokes online that read fine among friends and read very differently in a screenshot.
  • You searched for something weird, or medical, or embarrassing, at 2am.
  • You sent a compromising picture to one person you trusted.
  • Your bank knows you bought a car instead of fixing the roof. Your card processor knows the rest.

None of that is wrong. All of it is yours to keep, and right now you are not keeping it. "Nothing to hide" really means "nothing I have been punished for yet."

The risk is not that you did something wrong#

It is that the rules change and the data does not move with them. Three things shift, the data stays:

  • The law changes. A new rule says companies must share their data with other companies, insurers, or the state. Nothing you did changed. Your exposure did.
  • The context changes. The black-humour meme that was a joke in 2026 is evidence of who you "really are" to an employer, a custody court, or a border agent in 2031.
  • The holder changes. A company gets breached, acquired, or simply decides the data is worth more sold than kept. Your profile is now on a table you have never seen.

Data on the internet is not lost, it is filed. You are not judged on what you do. You are judged later, by someone else, on what was kept. That is the part "nothing to hide" never accounts for.

Where it comes from#

You are not being hacked for this. You are handing it over.

Your phone. Google logs where you are, where you go, the routes you take, and how long you stay - open your Maps Timeline and read your own life back. It has your contacts, your calendar, your wake and sleep times from when the screen comes on, the Bluetooth headphones you paired, every app you opened, and an ad profile precise enough to know you have been shopping for a monitor.

Your computer. On stock Windows: keystrokes, what you type into forms, browser history, your files, your location. How much exactly, nobody outside Redmond can say, because it is closed source and you cannot check. The loyalty card at the supermarket fills in the rest - what you eat, how often, how many kids you feed.

Your AI chats. The newest source, and the most revealing. People type things into ChatGPT, Claude, and Gemini they would never put in a search box: symptoms in full sentences, relationship and money problems, work they should not be pasting, their reasoning spelled out step by step. That is a deeper profile than a search history ever was. The provider stores it, trains on it by default unless you opt out, and can be made to hand it over. It does not even take the provider - a browser extension sitting on the page can read the conversation straight out of it, and extensions have already been caught lifting ChatGPT sessions, so the chat leaks through the browser you typed it into.

All of it feeds one thing: a profile. Humans and models assemble an exact picture of you from the fragments, and that picture gets sold, or lands in front of your employer, or your insurer, or a police analyst who decides what kind of person you are. Unlikely where you live, maybe. Already true in places people did not expect it to become true.

So do something cheap#

You do not have to disappear. Most of the leverage comes back from a few changes that cost an afternoon:

  • Change your search engine today. It is the single richest profile source and the easiest to cut. Brave Search or DuckDuckGo.
  • Watch what you paste into AI chatbots. Turn off chat history and training in the settings, or run a local model so the conversation never leaves your machine.
  • Switch browser. Brave or LibreWolf out of the box, or Firefox after some tuning.
  • Use an encrypted messenger. Signal, or Element on Matrix where the server owner cannot read your messages either.
  • Stop letting the browser and Google store your passwords. Use a real password manager.
  • Prefer open-source software for anything that touches your data - if it is open, it can be checked.
  • Know what you are sharing before you click accept. Read the one screen nobody reads.

That is the floor, not the ceiling. How far you go past it is down to how much you care and how much you want to learn.

This is not paranoia, and it is not about having something to hide. It is refusing to hand a stranger leverage over a version of you that does not exist yet. Do not fight the whole machine. Just stop feeding it for free.