Last Saturday, my mother rang to tell me she'd received an advert on her phone — something about blood pressure medication. She hadn't searched for anything. She hadn't typed a word. But two days earlier she'd been on the phone to her sister, talking about the family doctor and a new prescription.
"The phone was listening to me," she told me, quite certain of it.
Perhaps it was. Perhaps not — the technical explanation is more nuanced than that. The subject itself is hardly new; this kind of unease has been circulating for at least five years. But her reaction says something essential: instinctively, we feel that we have lost control over what the world knows about us. And, by and large, we are right.
What We Mean by Anonymity, and Why It Matters
Anonymity is not a technical concept reserved for hackers or political dissidents. It is a fundamental psychological experience — the sense that you can exist, think, and act without every gesture being recorded, interpreted, and stored somewhere.
John Suler, professor of psychology at Rider University and author of The Psychology of Cyberspace, describes this need with clinical precision: each of us carries a public self and a private self simultaneously. The public self navigates social relationships — family, colleagues, neighbours. The private self is the interior space of reflection, of unspoken thoughts, of identity still being formed. Without that space, our sense of wellbeing begins to unravel.
This isn't paranoia. It's psychological hygiene.
The trouble is that this space is being systematically eroded, day by day, through mechanisms we have accepted without fully understanding them.
Radu and His Paper Passwords
Radu is fifty-four, works at the local council, and is the most methodical person I know. He keeps his invoices in folders labelled by year, maintains a handwritten address book, and never forgets to take his receipt at the till.
When I asked him how many different passwords he used online, he smiled, a little sheepish: "Just the one. But I've written it down on a slip of paper in my wallet, so I don't forget."
The same password. For email, for online banking, and for his wife's Facebook account, which he manages on her behalf.
Radu is not an exception. Radu is the rule.
A 2013 Pew Research study found that 59% of American internet users believed it was practically impossible to protect their online identity fully. And yet the behaviour of most people — including those who acknowledge the risk — remains indistinguishable from Radu's: one password, an "Accept" tapped without reading, location services switched on because the app required it.
Researchers have a name for this gap. They call it the privacy paradox: the systematic distance between stated values and actual behaviour. We know we ought to do things differently. We don't.
What Maria's Phone Knows
Maria is seventeen and uses her phone for roughly eight hours a day. She has no great secrets — or so she believes.
But her phone knows that every Tuesday evening she goes out with the same group of friends and gets home after midnight. It knows she has spent the past three months repeatedly searching for a particular band, and that she has visited the same Instagram profile twenty times. It knows she reads articles about anxiety before going to sleep, and that every morning she listens to the same playlist without variation.
None of this information is, in itself, compromising. But taken together, these fragments build a behavioural profile more detailed than any diary Maria could consciously keep.
Paul Ohm, professor of law at Georgetown University, describes this reality through a distinction between intentional anonymity — what you choose not to disclose — and inferential anonymity — what others can deduce from a single starting point. His conclusion is blunt: "It has become increasingly clear that this is a losing game. Once someone knows something about you, they can probably find out a great deal more."
The Neighbour Who Has No Facebook
Mr Ionescu on the third floor is proud that he has no account on any social network. "I don't give them my data," he says, whenever the subject comes up in the stairwell.
He's partially right. Staying off social media does reduce your visibility to other users — former colleagues, distant relatives, marketing agencies targeting social behaviour.
But it doesn't make him invisible to the entities genuinely capable of building detailed profiles. Peter Swire, professor at the Georgia Institute of Technology and former digital security adviser to the Obama administration, is direct: "It's much harder to be anonymous than it was twenty years ago, at least from large companies and the government."
Mr Ionescu pays by card. He uses a phone with a registered SIM. He has a cable television subscription. He consumes electricity, utilities, medical services — each leaving traces in interconnected databases. We are living, Swire says, in a golden age of surveillance: access to financial records, medical histories, and frequently visited locations is no longer an investigative effort. It has become an administrative procedure.
Andrei and the Advertisement That Unsettled Him
Andrei, a family friend in his early thirties, told me about something he couldn't account for rationally. He had just bought a flat, and for several days he and his wife had been discussing furniture — only verbally, at home, with no online searches whatsoever. A few days later, his Instagram feed was saturated with adverts for furniture and interior design.
The probable explanation is not that his phone was "listening" in any literal sense. It is subtler than that, and in some ways more unsettling. His behaviour had shifted slightly in the wake of the purchase — he'd opened a banking app, visited a property website, made a payment online. The algorithms correlated these signals and drew the correct conclusion.
It isn't magic. It is statistics applied at massive scale. And it works.
Ohm describes location tracking and behavioural profiling as "the next great frontier in advertising": systems that identify a user's precise location in real time and deliver personalised commercial content based on their physical proximity to particular points of interest.
Grandmother and the WhatsApp Photographs
My grandmother is seventy-four and has a smartphone she received as a gift from us. She uses it mainly for WhatsApp — sending photographs of the garden, the cat, and whatever she has cooked that day.
She doesn't know what metadata means. She doesn't know that every photograph she sends carries the exact time it was taken, and sometimes the GPS coordinates of where she was standing. She doesn't know that WhatsApp, despite encrypting the content of messages, collects extensive data about who she communicates with, how often, and at what hour.
I don't blame her. I blame us — those of us who handed her this technology without explaining the rules of the game.
Carnegie Mellon researchers who interviewed dozens of internet users across four continents reached a conclusion I recognise in my grandmother's story: people from all walks of life have, at one point or another, had reason to seek anonymity. But the tools and knowledge required to achieve it are not equally distributed.
When Anonymity Protects, and When It Causes Harm
Not all consequences of losing anonymity are negative. And anonymity is not, in itself, an unqualified good.
The same Carnegie Mellon study that documents the need for anonymity found that 53% of participants admitted to having used it for problematic behaviour — online harassment, access to illegal content, trolling.
Think of the comments beneath Romanian news articles. The verbal violence, the racism, the misogyny expressed with a brazenness that would be impossible face to face — all of it is the product of the same anonymity that, in other contexts, we rightly cherish.
The tension is real, and it does not resolve itself neatly. A 2015 Pew study showed that 56% of Americans would accept a reduction in civil liberties — including online privacy — if it offered more effective protection against terrorism. Security versus privacy. There is no universal formula. There are only values in permanent conflict and the need for a socially negotiated balance, rather than one imposed unilaterally.
What We Can Do — Concretely, and Now
There is no complete technical solution. But there are small decisions with real consequences.
For you and your family
- Explain to older relatives — parents, grandparents — what data the applications they use are collecting. Not to frighten them, but to make them conscious partners in their own digital choices.
- Help them set up two-factor authentication on their banking and email accounts. It takes ten minutes and makes a meaningful difference.
- Talk to your children about digital footprints — not as a moral lesson, but as practical education. What you post stays. Contexts change; data doesn't.
Basic habits
- Use different passwords for different services. A password manager — Bitwarden (free) or 1Password — makes this straightforward.
- Check the permissions of the apps installed on your phone from time to time. How many of them have access to your microphone, location, or contacts without any obvious reason?
- Read at least the summary of a privacy policy before installing new applications. There are browser extensions that perform this analysis automatically.
The rule I follow myself
Peter Swire, the legal scholar who advised the White House on digital security, gives everyone the same piece of advice: apply the front-page test. Don't write in messages or emails anything you would be embarrassed to see on tomorrow's front page. It's simple, practical, and sufficient for ninety per cent of situations.
Privacy Cannot Be Recovered Technically — It Must Be Rebuilt Culturally
Encryption apps help. Strong passwords help. But they are not sufficient for a problem that is, at its core, cultural and political.
Swire is explicit: rebuilding anonymity as a fundamental right requires coordinated legislative change at a global level — an agreement between governments, corporations, and citizens on minimum ethical standards. The European GDPR is proof that this kind of change is possible: imperfect, contested, but real.
You can contribute to that change not through spectacular gestures, but through consistent choices — which services you support financially, which applications you uninstall, which politicians you back based on their positions on digital rights.
In Place of a Conclusion
My mother will keep receiving adverts for blood pressure medication. My grandmother will keep sending photographs of the garden without knowing they carry more information than she intends. Radu will keep his password in his wallet.
And, in all likelihood, they will be fine.
But it is worth knowing. It is worth understanding the mechanisms that shape our digital lives — not so we can become paranoid, but so we can be, in Swire's words, conscious partners in the negotiation between convenience and privacy.
"We all need to maintain a private space in which our most profound thoughts are hidden from others," Swire says. "It gives us room to develop as human beings. That doesn't change because of the internet."
The internet has changed the rules. The need remains.
Ten Questions and Answers
1. What is anonymity, really, and why does it matter more than it appears to?
Anonymity is not a technical term reserved for hackers. It is the psychological experience of being able to exist, think, and act without every gesture being recorded, interpreted, and stored somewhere. John Suler describes this need through the distinction between the public self — which navigates social relationships — and the private self — the interior space of reflection and unspoken thought. Without that space, wellbeing becomes destabilised. It is not paranoia. It is psychological hygiene. And it is precisely this space that is being eroded, day by day, through mechanisms we have accepted without fully understanding.
2. What is "the privacy paradox" and why can't we seem to escape it?
The privacy paradox is the systematic gap between stated values and actual behaviour. We know we ought to use different passwords, read privacy policies, check our app permissions. We do none of it. A 2013 Pew Research study showed that 59% of American internet users believed it was practically impossible to protect their online identity fully — and yet their behaviour remained identical to Radu's, the man with the password on a slip of paper in his wallet. Recognising a risk does not, by itself, produce a change in behaviour. That is precisely the paradox.
3. How do algorithms build a profile of you without your ever having disclosed anything directly?
Paul Ohm distinguishes between intentional anonymity — what you choose not to reveal — and inferential anonymity — what others can deduce from a single point of departure. Maria, seventeen, has said nothing to anyone. But her phone knows she goes out every Tuesday evening, that she keeps returning to the same Instagram profile, that she reads articles about anxiety before bed. No single piece of information is, in itself, compromising. Taken together, these fragments assemble a behavioural profile more detailed than any conscious diary. Ohm's conclusion is unsparing: as long as someone knows something about you, they can probably find out a great deal more.
4. Why isn't it enough simply to stay off social media?
Staying off social media reduces your visibility to other users, but it doesn't make you invisible to the entities truly capable of building detailed profiles. Peter Swire, former digital security adviser to the Obama administration, is direct: it is far harder to be anonymous than it was twenty years ago, at least where large companies and government are concerned. Mr Ionescu on the third floor — proud of his Facebook-free life — pays by card, uses a phone with a registered SIM, consumes utilities and medical services. Each leaves traces in interconnected databases. We are living, Swire says, in a golden age of surveillance.
5. How do adverts seem to know what you've discussed out loud, when you haven't searched for anything online?
The probable explanation is not that the phone is "listening" in any literal sense. It is subtler and, in some ways, more unsettling. Behaviour shifts slightly after an important decision — you open a banking app, visit a property website, make a payment online. Algorithms correlate these signals and reach the correct conclusion. It is not magic. It is statistics applied at massive scale. Ohm describes location tracking and behavioural profiling as "the next great frontier in advertising" — systems that identify a user's exact location in real time and deliver personalised commercial content based on their physical proximity to particular points of interest.
6. What data does a photograph sent on WhatsApp produce, beyond the image itself?
Every photograph sent contains metadata: the exact time, and sometimes the GPS coordinates of where it was taken. WhatsApp encrypts the content of messages, but collects extensive data about who you communicate with, how often, and at what hour. The grandmother in this piece sends photographs of her garden and her cat without knowing any of this. Researchers at Carnegie Mellon who interviewed users across four continents reached a straightforward conclusion: people from all social backgrounds have, at some point, had reason to seek anonymity — but the tools and knowledge required are not equally distributed.
7. Are there positive consequences to the loss of anonymity?
Yes, and it is important to acknowledge this without oversimplifying. Not all consequences are negative, and anonymity is not a good in itself in every situation. The same Carnegie Mellon study found that 53% of participants admitted to having used online anonymity for problematic behaviour — harassment, access to illegal content, trolling. The verbal violence in the comments beneath Romanian news articles is, in essence, the product of the very anonymity we value in other contexts. The tension is real and does not resolve simply. A 2015 Pew study showed that 56% of Americans would accept a reduction in online privacy if it offered more effective protection against terrorism. Security versus privacy — there is no universal formula.
8. What is the simplest, most practical piece of advice for protecting digital privacy?
Peter Swire proposes the front-page test: don't write in messages or emails anything you would be ashamed to see on tomorrow's front page. It is simple, practical, and sufficient for ninety per cent of situations. Beyond that: use different passwords for different services — a manager such as Bitwarden or 1Password makes the process far easier; set up two-factor authentication on banking and email accounts, which takes ten minutes and has significant impact; check the permissions of the apps on your phone periodically. How many of them have access to your microphone, location, or contacts without any obvious justification?
9. Can the problem of anonymity be solved by purely technical means?
No. Encryption applications help. Strong passwords help. But they are not sufficient for a problem that is, at its core, cultural and political. Swire is explicit: rebuilding anonymity as a fundamental right requires coordinated legislative change at a global level — an agreement between governments, corporations, and citizens on minimum ethical standards. The European GDPR is proof that this kind of change is possible: imperfect, contested, but real. The individual contribution comes not through spectacular gestures, but through consistent choices — which services you support financially, which applications you remove, which politicians you back based on their positions on digital rights.
10. Why is it worth understanding these mechanisms, if we can't fully control them anyway?
Because understanding transforms victims into conscious participants. Swire says we all need to maintain a private space in which our most profound thoughts are hidden from others — it gives us room to develop as human beings, and that doesn't change because of the internet. The internet has changed the rules. The need remains. My mother will keep receiving adverts for medication. My grandmother will keep sending photographs of the garden without knowing they contain more information than she intends. Radu will keep his password in his wallet. But it is worth knowing. Not to become paranoid, but to negotiate — knowingly — between convenience and privacy.
Bibliography
-
Pew Research Center (2013). Anonymity, Privacy, and Security Online. pewresearch.org
-
Pew Research Center (2015). Americans' Views on Government Surveillance Programs. pewresearch.org
-
Sleeper, L. et al., Carnegie Mellon University (2013). I Read My Twitter the Next Morning and Was Aghast. dl.acm.org
-
Suler, J. (2004). The Online Disinhibition Effect. CyberPsychology & Behavior. liebertpub.com
-
Acquisti, A., Brandimarte, L., Loewenstein, G. (2015). Privacy and human behavior in the age of information. Science. science.org
-
Electronic Frontier Foundation — Privacy. eff.org/issues/privacy
Author's Note — Limitations, Tensions, and Rhetorical Choices
When I wrote this piece, I knew from the outset that I was moving across terrain I do not entirely master — and that troubled me more than any technical detail I didn't understand. I am not a specialist in digital security. I have no doctorate in the psychology of privacy. I am a person who watched his mother frightened by an advert for medication, and who felt, in that particular Tuesday morning moment, that he had something to say — something not necessarily original, but which could be said in a human voice, without jargon, without the clinical register of specialist articles that makes people scroll straight past.
That is, in fact, my first compact with the reader: I offer real people in place of abstract statistics. Radu with his password in his wallet. Maria with her phone. Grandmother with her WhatsApp photographs. Mr Ionescu, proud of his Facebook-free existence. These are composite figures, reconstructed from genuine observations and from types we all recognise — and that is precisely why they work rhetorically better than any chart. Before I explained what the privacy paradox is, I had you recognise it in Radu's behaviour. Before I cited Paul Ohm, I had you think about Maria and the Instagram profile she visits twenty times over.
This is one of the central tensions in the piece: between anecdote and rigour. I used these characters deliberately and consciously as rhetorical tools to hold attention — but there is a real risk in that strategy. The concrete and human simplifies. Radu is neither heroic nor foolish — he is recognisable. But that very recognition can create a false intimacy with the problem, the impression that you understand it because you understand Radu, when in truth the technical and legal infrastructure behind digital surveillance is something else entirely — vast, opaque, deliberately inaccessible.
I chose not to go into the technical details of behavioural tracking, browser fingerprinting, data brokers, or the architecture of advertising targeting systems. Not for want of research, but because the stated purpose of this piece is different: to shift an attitude, not to deliver a course. But this editorial choice carries a cost in honesty that I freely acknowledge: a reader who leaves this text with the impression of having understood digital surveillance in depth is mistaken. They have understood a surface layer — sufficient to make a few better decisions, insufficient to critically evaluate public policy in the field, or to negotiate fair terms with digital platforms.
The second tension I feel in the text — one I have not entirely resolved — is between the pedagogical register and the empathetic one. There are moments where I write as a teacher explaining. There are moments where I write as a son thinking about his mother. These voices are not always compatible. The teacher wants clarity and structure. The son wants to remain in that Tuesday morning moment, phone to ear, listening to his mother saying the phone had been listening to her. I felt the constant temptation to stay longer in the son's voice — and I resisted it, because the piece has a practical purpose. But I sometimes wonder whether that resistance cost something in authenticity.
Another limitation I can now see clearly: geography and cultural context. The studies cited are predominantly American — Pew Research, Carnegie Mellon, Georgetown University, Georgia Tech. The reality of digital surveillance in Romania has its own particularities: a legislative context in which GDPR is implemented unevenly, institutions with limited auditing capacity, a population whose digital literacy is distributed very unevenly along lines of age and urban-rural geography. When I speak of grandmother with her WhatsApp, I am speaking of a specific context that American studies do not fully capture. I used the academic citations as background authority, but I did not adequately nuance the difference in context.
On the rhetorical tools of the text — I acknowledge them without embarrassment, because to deny them would be to lie. I used a structure of short chapters with titles anchored in proper names, precisely because a generic heading would have anonymised the experience and turned it into a concept. "What Maria's Phone Knows" is more powerful than "Behavioural Profiling of Minors." Not because the first is more precise, but because it sets you in motion before you have decided whether you want to be.
I also used the technique of alternation — an anecdotal character, a statistic, an academic quotation, another character. That rhythm creates the illusion of completeness without giving the reader all the data necessary for an independent judgement. I guide them, with good intentions but quite deliberately, towards the conclusions I believe to be correct. This is a power I exercise with full responsibility, but one I have no right to conceal. Rhetoric is not neutral. Neither is mine.
Finally: this piece ends with a form of consolation, not alarm. My mother, my grandmother, and Radu will, in all probability, be fine. That editorial decision was conscious — and it can be criticised. There are serious arguments that I underestimate the real risks of mass surveillance, that the calm of the final paragraph deactivates the very urgency the first paragraph had activated. I chose it because I do not believe that sustained fear produces behavioural change. I believe it produces habituation to fear, not action. But I understand that someone else would have ended differently.
These are the limitations of this piece. I have written them down because any writer who fails to acknowledge their own limitations is lying — either to the reader, or to themselves.