You spent an evening flipping every switch in your iPhone, your Google account, and your Facebook settings. It felt good. It also barely matters. The privacy controls you can see are a small slice of the data flow around you, and most of what makes you trackable happens in places you can’t toggle.
Settings only govern what the platform admits to collecting
Privacy menus are a negotiated truce between platforms and regulators, not a complete map of data practices. When you opt out of “personalized ads,” you’re often opting out of the ad you see, not the data behind it. The platform still logs your activity, still shares it with measurement partners, and still uses it to train internal models. Apple’s App Tracking Transparency, for example, blocks one specific identifier (the IDFA) but doesn’t stop fingerprinting, server-side tracking, or first-party data sharing. The result is a paperwork win that leaves the underlying surveillance architecture intact.
Data brokers don’t ask permission
Behind every consumer-facing privacy setting is an industry of data brokers — Acxiom, Experian, LiveRamp, and dozens of smaller firms — that aggregate information from public records, loyalty programs, credit applications, and partner companies. They have your address history, your estimated income, your inferred medical conditions, and your phone’s daily location pattern. None of that comes from settings you control. Removing yourself from broker databases is possible but tedious; California and a handful of other states require deletion on request, but the burden is on you, the lists regenerate, and the small army of services that promise to do this for you have mixed track records.
Metadata leaks more than content
Even if every app honored your preferences, metadata would still give you away. Your device’s IP address, screen resolution, fonts, browser version, and battery level combine into a fingerprint that’s nearly unique. Your phone pings cell towers continuously. Your car’s infotainment system phones home with location and driving data. Smart TVs use automatic content recognition to log what’s on screen. None of this shows up in a privacy menu, because it’s not framed as personal data — it’s framed as performance telemetry, diagnostics, or “service improvement.” The aggregate, however, is a near-complete picture of your life.
What actually moves the needle
Real privacy gains come from infrastructure-level choices, not toggle-flipping. A privacy-respecting browser like Brave or Firefox with strict tracking protection blocks more than any setting on a default Chrome install. A VPN limits what your ISP can sell. Using a separate email and phone number for accounts breaks the cross-referencing that brokers depend on. Paying for services rather than using free ones removes the ad-funded incentive to surveil. None of these are perfect, but each cuts off a category of leakage that no setting can.
Bottom line
Privacy settings are worth using, but treat them as the floor, not the ceiling. The bigger exposures happen at layers you can’t see — broker databases, metadata, and infrastructure defaults. If privacy matters to you, change the tools, not just the toggles.
Leave a Reply