privacy

California's data brokers must start processing DROP deletion requests on August 1, 2026. Here's what that deadline does and doesn't mean for your data.

In 2024 the FCC fined AT&T, Verizon, T-Mobile, and Sprint $148M for selling real-time location data. Here's what your carrier knows and how to limit it.

Reading every privacy policy would take 76 work days a year, a Carnegie Mellon study found. Here are the five clauses that matter, and how to find them.

700 million LinkedIn records once sold on a hacking forum. Here is what LinkedIn knows about you, and the settings that cut your exposure.

Smart speakers wake up by mistake up to 19 times a day and send audio to company servers. Here is what Echo, Nest, and HomePod record, and how to stop it.

Three EU-US data transfer deals were struck since 2000. Two were struck down by courts, and the third now faces fresh challenges. Your data sits in it.

Facebook paid $650 million over face recognition. Here is what biometric privacy laws (Illinois BIPA, GDPR) say about your face, voice, and fingerprints.

Dating apps collect precise location, and brokers resell it. Grindr's data has outed people. Here is what dating apps track and how to limit who sees it.

License plate readers and ANPR cameras log every vehicle that passes, no warrant needed. Here is what this location data shows about you and how to act.

Bossware tracks keystrokes, takes screenshots, and logs the sites you visit. Here is what's used, what's legal, and how to spot it on your work computer.

Bluetooth beacons and Wi-Fi probes let stores track which shops you enter and how long you stay. Here is how in-store tracking works and how to stop it.

India's Smart Cities Mission put CCTV, facial recognition, and command centres across 100 cities. What they collect and what oversight exists.

Connected cars log your location, driving behavior, voice, and contacts, and automakers sell some of it. Here is what your car collects and what to do.

Hidden AirTags and GPS trackers turn up in wheel wells, handbags, and pockets. Here is how these tracking devices work and how to detect one on your car.

Doxxing publishes your private details to enable harassment. Here is how doxxers find your address and phone number, and how to become a harder target.

Stalkerware is spyware sold for 'monitoring' but used against partners. Here is how it works, how to detect it on your phone, and how to remove it safely.

Your phone tracks your location and sells it to brokers, advertisers, and agencies. Here is every tracking method, who buys it, and how to cut exposure.

Pharmacy chains sell prescription data to drug companies, insurers, and brokers. What 1mg, PharmEasy, and your chemist know about you, and where it goes.

The Ayushman Bharat Digital Mission links health records for 1.4 billion Indians. What the ABHA health ID collects, who can see it, and the privacy risks.

Before your premium is set, insurers may have bought your pharmacy records, location history, and searches. Here's how pre-application profiling works.

The Meta Pixel on hospital websites sends your appointment searches and symptom queries to Facebook's ad servers. Here is how it works and how to block it.

23andMe's bankruptcy turned 15 million genetic profiles into a sellable asset. Here's how to delete your DNA data now, step by step.

Your fitness tracker sends heart rate, sleep, and activity data to Google, Apple, and insurers. Here is the privacy calculus behind wearable devices.

BetterHelp shared therapy data with Facebook for ads. Here is what mental health apps do with your most sensitive disclosures, and how to protect it.

Period tracking apps like Flo collect your most intimate health data, then share it and store it where it can be subpoenaed. Here is how to lock it down.

23andMe went bankrupt in 2025 with 15 million genetic profiles as its top asset. A genetic privacy guide: what's collected, who owns it, how to delete it.

Your prescriptions, insurance claims, and hospital visits are bought and sold by health data brokers. Here's how the industry works and what you can do.

OpenAI, Google, Meta, Adobe, and LinkedIn all train AI on your data. Here is the exact setting to change at each one, and which give no choice.

A short WhatsApp voice clip lets AI clone a relative and fake a distress call. Here's how it works and the one thing that stops it.

Criminals use deepfake video to pass KYC checks, open bank accounts, and impersonate executives on live calls. Here's how these attacks work.

Apps like Replika and Character.AI record your most intimate conversations. Their data practices range from murky to alarming. Here is what they keep.

Gemini and Copilot are embedded in the work tools you use daily. Here is what happens to your emails, documents, and meeting recordings.

India is building one of the world's largest facial recognition systems. What AFRS, the Safe City projects, and Aadhaar biometrics mean for your privacy.

AI can clone a voice from a WhatsApp status or reel and make a convincing distress call to your family. Here's how the scam works and what to do.

Stable Diffusion, DALL-E, and Midjourney trained on billions of scraped images. Here is how to check if your photos are in AI training data.

OpenAI, Google, Meta, and more log every prompt you type. Here is what each major AI company collects about you, and how to limit it.

Every ChatGPT question is logged, maybe reviewed by humans, and may train future models. Here is what OpenAI keeps and how to delete it.

Gmail has 1.8 billion users. Most don't know which third-party apps are reading their inbox right now. Here's your honest migration guide.

Children's apps are among the worst data collectors. Here is what they collect, the laws (COPPA, GDPR, DPDPA) meant to stop it, and what parents can do.

You reuse passwords across 100 sites. When one gets breached, every account is at risk. A password manager fixes this. How to choose and get started.

Amazon confirmed human reviewers listen to Alexa recordings. Here's what each smart home device collects, where it goes, and how to lock it down.

Your password is probably already in a breach database. Two-factor authentication keeps you safe anyway. Which type to use, and how to set it up.

Meta tracks you across millions of third-party websites, builds profiles on people who never signed up, and knows what medicine you looked up last night.

Your phone drops to No Service. Within minutes, someone is inside your bank using SMS codes going to their phone. Here's exactly how SIM swap attacks work.

Google stores every search, location, YouTube video, and email. Here is what they hold, where to find it, and how to reduce it, step by step.

VPN marketing is full of threats that don't exist and protections it can't provide. Here's what a VPN actually does — and when it's worth using.

Most iPhone users never change their privacy settings from Apple's defaults, and some favor Apple, not you. Here is the full privacy audit for iOS 26.

WhatsApp encrypts your messages. Meta still builds a detailed picture of your social life from everything else. Here's exactly what they see.

Tracker blocking is one of the best privacy tools, but it has limits. Here is what it stops, what it misses, and which tools are worth installing.

A privacy breach is broader than a hack. Learn the five types, the real harm each causes, and the legal rights and steps you have to respond.

Most people are in 3–10 breaches they never knew about. Learn how to check if your data was leaked, using free tools, and what to do next.

A $200 billion industry trades your personal data every day. See the data broker economy: who collects it, who buys it, and what it sells for.

GDPR has produced billions in fines, so your rights have teeth. How to send an erasure request or Subject Access Request, and what to do if ignored.

Brexit split UK residents from EU GDPR enforcement in 2021. Here is what UK GDPR gives you today, and what the Data (Use and Access) Act 2025 changed.

Data brokers run inference engines that predict your health, politics, and finances from your behavior. Here's how the profiling machinery works.

Most cookie banners are built to frustrate your GDPR rights while pretending to respect them. Here is what is actually illegal under GDPR, and what to do.

EU data brokers operate under GDPR — which means you have enforceable deletion rights, not voluntary opt-outs. Here's how to use them.

A data breach is unauthorized access; a data leak is accidental exposure. See how the difference changes your legal rights and next steps.

Spokeo, BeenVerified, Whitepages, and 200+ sites list your address, phone, and relatives. Here's how to remove yourself, and why you'll keep doing it.

Spokeo, Whitepages, and BeenVerified list your income estimate, relatives' addresses, and 20 years of past homes. Here's how to remove yourself from each.

Web scraping, licensing deals, and annotation pipelines have put your posts and personal writing inside AI training sets. Here is how it works.

CCPA is the strongest US privacy law. It also has gaps most people don't know about. Here's what California residents can actually do with it.

Delete yourself from the internet: search results, social media, US/EU/India data brokers, public records, AI datasets, and what you genuinely can't erase.

Every major type of cyber fraud, how each one works, and what recovery actually looks like. FBI IC3 logged a record $16.6 billion in losses in 2024.

From the 2018 Aadhaar leak to the 2024 Star Health breach, an Indian data breach index of what was exposed and what to do about it.

Your name, employer, home address, and phone are searchable from 40+ sources. Here's the counter-OSINT playbook to shrink that footprint, layer by layer.

Account takeover fraud needs no card or PIN. Attackers log into your bank with stolen credentials or session cookies. Here's how to spot and stop it.

You can't recover data that's already out there, but you can stop adding to it. A practical guide to email aliases and phone masks that work in India.

You cleared cookies and went incognito, but you're still tracked. Browser fingerprinting needs no cookie: it profiles you from your screen, fonts, and GPU.

Telegram is now a primary marketplace for stolen data, no dark web needed. See how these breach markets work and how to check if your data is for sale.

A software flaw is found, exploited, and months later your data is stolen. Here's the chain from vulnerability to breach, and why you can't control it.

India's DPDPA is law and its rules are notified, but penalty-backed enforcement is still ramping up. What that gap means for your rights in mid-2026.

Dormant email accounts hold years of receipts, bank alerts, and password reset tokens. The Yahoo breach exposed 3 billion. Here's how to clean up.

Pig butchering scams groom victims for months, then introduce a fake investment platform. Here's how the playbook works and the red flags to watch.

The DPDPA lets you demand your data be deleted. Most companies count on you not knowing how. Here is the step-by-step process, with a template letter.

Most anonymity guides hand you a VPN and stop. Real online anonymity covers your ISP, device fingerprint, payment trail, and habits. Here is how, by tier.

Dark web monitoring scans breach dumps for your email, phone, Aadhaar, and PAN. Here's exactly what it detects — and where it stops.

You registered on India's Do Not Disturb registry. The spam calls kept coming. Here's exactly why DND fails — and what actually reduces spam calls.

Data ownership is a myth in most legal systems. Here is what you actually have instead, and why 'your data' means something different to the company.

JustDial lists your number. Truecaller has your address. Here's how to remove your data from 200+ Indian and global sites, and why it keeps coming back.

Companies use deliberate interface design (dark patterns) to trick you into sharing more data and accepting wider tracking. Here is how to spot them.

Free Android apps fund themselves by selling your location, contacts, and IMEI to data brokers. Here's how it works, and which app categories are worst.

You never installed Truecaller, but your name and number are in its database. Here's how that happened, what they hold, and what the opt-out really does.

Scam callers address you by name, know your bank, and sound completely legitimate. Here's the exact data trail that makes this possible in India.

DELETE Act California how to file: the SB 362 mechanism, who it covers, the 400-broker gap it misses, and how to submit a request that works.

How to spot a deepfake video in 2026: lip-sync mismatches, blink anomalies, hand artifacts, and what automated verification actually checks.

AI voice clone scam call: how five seconds of audio is enough, where attackers source samples, why caller ID won't save you, and the safe-word defense.

India's Digital Personal Data Protection Act gives you real rights over your data. Here is what the DPDPA actually means, in plain English, as of mid-2026.

How data brokers find your information: the public records, app SDKs, and breach data they collect, plus what GDPR, CCPA, and DPDPA let you do about it.