The Nothing to Hide Argument, Taken Seriously

The argument, stated plainly

“I’ve got nothing to hide” is usually a shorthand for a bigger claim: since you’re not breaking any laws, wide collection of your data can’t hurt you, so objecting to tracking, surveillance, or data retention is either paranoid or performative. It’s worth taking this seriously instead of waving it off, because it’s not a stupid position. It’s just built on a model of how information works that doesn’t match how modern data collection actually works.

The short version of the counterargument is this: privacy was never really about hiding wrongdoing. It’s about controlling the context a piece of information travels in, and most data collection systems are specifically built to move information out of its original context.

Individual facts are boring, combined facts are not

Any single data point about you is usually unremarkable. A location ping outside a pharmacy. A search for a symptom. A late-night purchase. None of that tells a stranger much on its own, which is exactly why “nothing to hide” feels intuitively true when you think about one piece of information at a time.

The problem is that almost nothing about you is collected as a single piece of information. Ad exchanges run real time bidding auctions where, every time a page loads, your device ID, rough location, and app or browsing context get broadcast to a room of automated bidders before an ad is even chosen. Data brokers separately buy, merge, and resell records tied to device identifiers, hashed emails, and cross device graphs that link your phone, laptop, and smart TV to the same profile. Individually, a pharmacy visit and a late night search mean nothing. Merged into one file with a timestamp and a location history, they start to describe a pattern a health insurer, an employer, or a marketer would find very useful, without you ever having exposed anything you’d call sensitive on its own.

This is the first hole in the argument: you’re evaluating “harm” one data point at a time, but the systems collecting your data are optimized for aggregation, which produces meaning that no individual data point had.

Context doesn’t stay put

A second issue is what happens when information moves between contexts it was never meant for. You might log your cycle in a health app purely to track your own body. That’s a completely reasonable, low stakes decision inside the context of “an app I use privately.” The same data, subpoenaed in a legal proceeding, sold during a company acquisition, or exposed in a breach, is now being read by an insurer’s underwriting model, a background check vendor, or a party in a custody dispute. Nothing about the original act of tracking your cycle was reckless. What changed was the audience, not the information.

This is the actual mechanism behind most “I had nothing to hide and it still went badly for me” stories. Ordinary, legal information gets read by an audience it was never disclosed to, under rules the person never agreed to. Nobody committed a crime and got caught.

You’re rarely the only one in your own data

“Nothing to hide” also assumes the data is only about you, and it usually isn’t. Uploading your contacts to an app pulls your friends’ phone numbers into a company’s database without them ever installing anything. Location history that shows you were consistently at the same address as another phone links the two of you together in a dataset neither of you consented to jointly. Photo metadata can place other people at a location and time they never chose to share. Even a person with a genuinely uneventful life is, by default, dragging other people’s information along with theirs every time they hand data to a service. The argument only works if you’re the sole subject of your own data, and structurally, you almost never are.

Today’s purpose isn’t tomorrow’s purpose

Data that’s collected for one stated reason doesn’t stay bound to that reason. Companies get acquired and merge previously separate databases. Retention policies change. A breach exposes years of logs nobody thought would ever be read outside the company that held them. None of this requires bad intent at the point of collection, it’s just what happens to any large pile of retained information over enough time: the set of people who can access it, and the reasons they’re allowed to access it for, both drift. “I trust the company I gave this to” is a statement about today’s policy, not a guarantee about the data’s entire lifespan.

Being watched changes behavior even without wrongdoing

There’s also a behavioral effect that has nothing to do with actual harm ever materializing. People who believe they might be observed measurably change what they search for, read, or say, even when they’ve done nothing they’d need to hide from anyone. This is a documented effect on search and browsing behavior, not a hypothetical. The chilling effect doesn’t require a single bad outcome to be real. It’s produced by the possibility of being watched, which is a cost “nothing to hide” doesn’t account for at all, since it only tallies harms that follow from wrongdoing.

What actually follows from this, without overcorrecting

None of this means the honest reply to “I’ve got nothing to hide” is to panic or go for broke on privacy tooling. No single tool makes you private, full stop, and it’s worth being blunt about that instead of selling a fix that doesn’t exist.

Encryption is a good example of where the nuance actually matters. End to end encrypted messaging protects the content of a message in transit and often at rest, so the words themselves aren’t readable to the network or the provider. It generally does not hide metadata: who you’re messaging, how often, and roughly when. For a lot of the profiling described above, that metadata is more useful than the message content ever would have been, so “I use an encrypted messenger” answers a narrower question than people often assume.

A VPN is similar. It moves your traffic through a different party’s servers, which keeps your local network operator, your ISP, or whoever runs the public Wi-Fi you’re on from seeing your unencrypted traffic and, on most networks, from seeing which sites you’re visiting at all. It does this by shifting who can see that traffic to the VPN provider instead of removing visibility altogether. It doesn’t erase your presence online, and it isn’t a tool for anonymity or for evading anyone with lawful authority to compel records, it’s a way of choosing who sits between you and the open network for that connection.

Reducing ad tracking works the same way: browser tracking protection and cookie controls cut down one channel ad tech uses, but device and browser fingerprinting, account linkage, and data broker matching don’t rely on cookies at all, so no single setting closes the loop.

The useful response to “nothing to hide” isn’t a checklist of tools, it’s a change in the question you’re asking. Instead of “do I have something to hide,” ask “who’s actually going to see this, in what context, and can that context change without my knowledge.” That question can be answered honestly for a lot of the things you share, and plenty of the time the honest answer really is that wide exposure costs you nothing. The point isn’t to treat every disclosure as dangerous. It’s to notice that “harmless” is a claim about a specific context, and most data collection systems exist to move your information out of the context you made that judgment in.

If you want to go deeper on any one piece of this, from what VPNs and encryption actually protect against to how tracking and data broker pipelines work in more detail, you can find the rest of our explainers on The Privacy Wire.