~/startup $ grep -c "we value your privacy" ./terms.pdf // 1. they do. they've priced it.
THE CORPORATION
it can't care about you · it isn't staffed for it
[01] THE BUSINESS MODEL
A corporation cannot care about you. Not won't: can't. Caring isn't in the org chart, and the fiduciary duty points at the shareholders.
That's not cynicism, just the job description. When the product is free, the revenue is your behavior: what you read, what you linger on, where you sleep, who you message at 2am. The incentive gradient is the same everywhere: collect everything, keep it forever, monetize it everywhere, and apologize when caught. The apology is budgeted in advance, next to legal.
The privacy policy is not a promise to you. It's a liability shield against you, written by people whose performance review depends on how much it permits. "We value your privacy" is the most honest sentence in the document: they value it precisely, in dollars per profile, marked to market in real time.
And even the rare company that means well is one funding round, one acquisition, one bankruptcy judge away from its promises becoming someone else's inventory. Policies change retroactively. Databases don't forget. The dataset outlives the mission statement every single time.
// the market for you
| data brokers | thousands of companies you've never met, holding files you've never seen |
| your profile | auctioned in real-time bidding hundreds of times a day, every page load |
| retention | "as long as necessary." necessary for them, so: forever |
| your consent | pre-checked, dark-patterned, bundled with the off switch hidden |
| the exit | "delete my account" removes the button, not the rows |
| the floor | a breach is a press release for them and a permanent fact for you |
// you're not the customer. you're the crop.
[02] THE RECEIPTS
147 million credit files leaked by a company nobody signed up with. You were never its customer, only its merchandise. The patch had been available for months; executives sold stock before the announcement.
A personality quiz harvested 87 million profiles, mostly friends-of-friends who never touched it. Consent by proximity, and the use case was steering elections. The fine arrived years after the votes.
People mailed in their DNA; the company went bankrupt; the court treated the genome database as an asset for sale. Your genes implicate your relatives, who never consented, and outlive every brand that holds them.
The antivirus that promised to stop trackers sold its users' full browsing histories through a subsidiary. The FTC fine was $16.5 million; the margin on the data was the business plan.
HIV status and location data, shared with third parties. The most intimate field in any schema, handled like a shoe size, because in the schema that's exactly what it is: a column with a price.
Mozilla reviewed 25 car brands in 2023: all 25 failed on privacy. Some policies claim rights to data about your "sexual activity"; telemetry flows to insurers. The product's walls are the sensor array now.
$ tail -f /var/log/breach-response.log [day 0] we take your privacy and security very seriously [day 1] out of an abundance of caution [day 3] affecting a small subset of users [day 14] update: most users [day 30] here is 12 months of free credit monitoring [day 31] (collection resumes) // the apology is a template. the data was the point.
[03] CONSENT THEATER
At scale, consent is a stage prop. The play has one act, and it's a button that says ACCEPT ALL.
Reading the terms you "agree" to in a year is estimated at around 76 working days, which is why the design assumes you won't and engineers accordingly: accept in one click, refuse through three menus, withdraw by certified mail. That isn't an interface, it's a confession of intent. Consent that costs more to refuse than to give is just a toll.
And it doesn't even cover the real exposure: the brokers downstream who buy, merge, and resell your file without ever showing you a banner. There is no button for them. The only data that can't be sold, seized, leaked, or inherited by a bankruptcy court is data that was never collected. That's not a slogan but a system requirement. Minimal collection has to be enforced by the protocol, because it will never be volunteered by the quarterly report.
// trust math, not mission statements. the mission statement has a redline history.
[04] VERDICT
Don't trust the company. Use cryptography that makes the company's goodwill irrelevant.
End-to-end encryption isn't anti-business, it's anti-blind-trust: the operator can't sell, leak, or be subpoenaed for what the operator cannot read. That's the design rule behind everything I build and run: group chat with no readable middle, money and speech that don't file reports. The state won't protect you from this, because it's the data economy's best customer. So protect yourself: the tools work today.
// if the product is free and the company is worth billions, you already know what's for sale.