“I have nothing to hide.”
People usually say this with the satisfied expression of someone who has just demolished an argument. Privacy? Surveillance? Companies collecting enough personal information to assemble a digital understudy? It doesn't matter. They pay their taxes. Their most suspicious activity is eating grated cheese directly from the bag.
Then comes the equally confident follow-up: “Besides, I'm not interesting enough for anyone to care.”
Wonderful. Apparently, the entire surveillance economy has been waiting for your autobiography to become a hit bestseller.
Both arguments are stupid. That doesn't mean everyone who uses them is stupid. It means sensible people have swallowed a comforting idea that falls apart under even gentle examination.
Privacy isn't a prize for being fascinating. Nor is it an admission that you're running an international diamond-smuggling operation between school pickups. It's the ability to have a life without turning every part of it into somebody else's business.
You Already Have Things You Want to Keep Private
You probably wouldn't hand a stranger your unlocked phone, your bank statements, and a transcript of your last argument with your partner. You don't publish every medical appointment or invite your colleagues to inspect your search history during lunch.
None of this requires criminal intent. It requires being a person.
There are things you share with your doctor that you wouldn't share with your boss. Things you tell a friend that you wouldn't announce at Christmas dinner. Different relationships deserve different access to your life.
That separation is healthy. A world where everyone knows everything about everyone would quickly descend into something resembling a particularly vicious WhatsApp group.
“Nothing to hide” blurs the distinction between secrecy and privacy. Secrecy can involve concealing wrongdoing. Privacy also covers ordinary boundaries, dignity, and choosing your audience. You can be completely honest and still tell someone to mind their own business.
Try replacing “I have nothing to hide” with “I'm comfortable sharing this particular information with this particular organisation for this particular purpose.”
Suddenly, there are questions to answer. What information? Which organisation? Why? For how long? Who else gets it? Those are the questions the original slogan conveniently skips.
A useful test is whether you'd accept the same behaviour face to face. If a shop assistant followed you through town noting every stop, you'd probably object. Putting a notebook inside an app doesn't automatically make the arrangement reasonable. Technology can make collection easier and less visible - it doesn't relieve the collector of having to explain why the information is needed and how it will be used.
Being Boring Is Not a Privacy Strategy
“Nobody would be interested in me” assumes that collecting your information requires someone to find you personally compelling. It doesn't. An advertising system doesn't need to admire your personality. A scammer doesn't require a thrilling backstory. A company building customer profiles isn't holding auditions for the next James Bond.
They need useful information. Where you live. What you buy. Which accounts you use. When you're likely to respond. Whether a convincing message might persuade you to click. Your life can be spectacularly uneventful and still contain plenty of material worth exploiting.
Think of a burglar. You don't need an art collection to make leaving your front door open a bad idea. A laptop and an easy opportunity will do nicely.
Digital collection also happens at scale. Software can gather and sort information without anyone reading your profile over coffee. Your supposed dullness doesn't protect you from a process that never asks whether or not you're entertaining.
This is why failing to take basic precautions because you're “not interesting” is such poor reasoning. You're using a judgement about your social appeal to make a decision about your exposure to risk. The two have bugger all to do with each other.
You can't reliably predict which detail will matter later. You can, however, avoid treating obscurity as an invisible force field. Being one person among millions offers less reassurance when a computer with AI can search those millions while you make toast.
Your Data Can Be Valuable Without Anyone Knowing Your Name
People often imagine personal information as a neat file labelled with their full name and a sinister looking surveillance photograph.
In practice, a device identifier or an account-linked trail can be useful without that presentation. Someone may want to reach a category of people, recognise a returning device, or analyse movements rather than introduce themselves to you personally.
We don't need conspiracy theories to demonstrate that sensitive information gets traded. In January 2025, the US Federal Trade Commission finalised an order against Gravy Analytics and Venntel. The agency had alleged unfair collection and sale of location data, including information about visits to healthcare facilities and places of worship.
The wider lesson is straightforward: ordinary movements can reveal sensitive things. You don't need to announce a religious belief or medical concern if a sufficiently revealing trail suggests one. That suggestion might also be wrong. You could work at a clinic, accompany a friend, or live above a business. Location doesn't explain itself.
Being reduced to a profile is unpleasant enough. Being reduced to an inaccurate profile adds a special administrative flavour of misery.
“I've Done Nothing Wrong” Doesn't Protect You From Mistakes
The nothing-to-hide argument assumes that observation produces accurate understanding. Anyone who has ever dealt with a billing department should already have reservations about this.
A record can be correct while the conclusion drawn from it is nonsense. You searched for a condition because your mother was diagnosed. You researched extremist propaganda for an article. You bought unusual equipment for a perfectly ordinary hobby.
Context matters. Databases are not automatically blessed with it.
Then there are straightforward errors: outdated addresses, mistaken identities, information attached to the wrong person, and old records that survive long after circumstances change.
You don't need to imagine a vast coordinated plot. Organisations can cause problems through carelessness, bad assumptions, and systems nobody fully understands. Human incompetence remains a remarkably well-funded industry.
The practical response is to correct important records when you spot errors and keep evidence of the correction. Where an organisation offers an account history or data download, inspect it rather than assuming it's accurate.
You don't have to audit your entire existence every Sunday. Start with information that affects money, access, identity, or your home address.
Also resist the idea that more data always means a more truthful picture. A hundred scraps of information can still be a hundred scraps without the explanation that connects them. Someone who sees your purchases doesn't necessarily understand your household. Someone who sees your reading doesn't necessarily understand your beliefs. Curiosity is not endorsement, and a search query is not a confession.
“I'm innocent” may describe you perfectly. It doesn't guarantee that every system will show you in that light.
The Problem Isn't Only the Government
Privacy discussions often jump straight to intelligence agencies, as though your only possible adversary wears an earpiece and works beneath a mountain. Most people have more immediate concerns.
An account thief. A pushy company. An abusive former partner. Someone scraping public contact details. A stranger using information you've shared to make a scam sound convincing. These are different problems. They need different precautions.
If your worry is account theft, stronger two-factor authentication matters. If it's public exposure of your home address, your social profiles and public listings deserve attention. If it's commercial tracking, app permissions and browser settings become relevant. Buying one vaguely reassuring privacy product doesn't automatically address all three.
Start by asking what you want to protect, from whom, and what would happen if they got it. Keep the answers concrete. “My main email account, from account thieves, because it can reset my other passwords” is useful.
“Everything, from everyone, because the internet is evil” is how you end up exhausted, confused, and shopping for a Faraday cage for the toaster.
Good privacy habits begin with realistic priorities. You can take the subject seriously without deciding that every passing van contains an intelligence team.
Information Outlives the Moment You Share It
You may be happy sharing something today. That doesn't settle every future use of it.
A service can change ownership. Your circumstances can change. Information can be copied, exposed in a breach, or combined with records from elsewhere.
A public post written when you felt safe might become a concern after harassment begins. A location update that seems harmless might reveal someone else's routine. Your child may eventually have strong opinions about the childhood you helpfully documented for strangers.
This doesn't mean every photograph will ruin your life. It means “fine right now” isn't the same as “fine in every possible context.” Before sharing, ask whether the information needs to be public, whether the audience can be smaller, and whether it needs to be shared immediately.
Posting holiday photographs after you return gives people the same opportunity to admire your lunch without broadcasting your absence in real time.
Before uploading a screenshot, check for addresses, account numbers, notifications, and names in the background. Cropping out the embarrassing browser tab while leaving your home address visible is an impressively selective approach to privacy.
Small pauses help. You don't need a legal department to post a picture. You need ten seconds of sense and attention.
Your Complacency Can Expose Other People
Privacy isn't entirely an individual choice because information often involves more than one person.
Your contact list contains other people's details. A group photograph identifies friends. A screenshot of a conversation contains someone else's words. A shared calendar can reveal another person's appointments. “I don't care who sees my information” doesn't give you unlimited authority to decide for everyone else.
One person may be comfortable being tagged at an event. Another may be avoiding an abusive relative. A third may simply dislike having their location announced. They shouldn't have to present a traumatic backstory to earn your cooperation.
Ask before posting identifying details about someone else. Don't upload an address book merely because an app makes the permission request sound friendly. Check what shared albums, calendars, and family accounts expose.
Normalising basic precautions helps people who need them most. If private communication is an ordinary habit, using it doesn't automatically announce that someone has a sensitive problem. You might feel you have nothing worth protecting. Someone whose information sits on your phone may disagree, and their opinion counts too.
There's a deeply annoying truth about improving privacy: some of it is spectacularly unglamorous. And yes, it takes a little effort. So does locking a bicycle. We generally manage without a philosophical debate about whether the bicycle is interesting enough to steal. Basic precautions are a reasonable response to ordinary risks. Waiting until you're personally targeted is a rotten policy.
You Don't Need to Disappear to Take This Seriously
The choice isn't between surrendering every detail and living in a forest arguing with a solar panel. You can keep using useful services, talking to friends, and buying things online while making more deliberate decisions about access to your life.
Be skeptical of anyone selling effortless invisibility. Be equally skeptical of the voice in your head saying precautions are pointless because you're ordinary. Ordinary people have money, relationships, identities, addresses, medical concerns, and futures. Those things deserve protection even when their owners have never done anything more dramatic than reverse into a wheelie bin.
That's what Ghost Citizen is about: practical, lawful ways to leave a smaller trail and retain more control. Evidence over paranoia. Useful habits over expensive theatre. You don't have to justify wanting privacy by producing a secret worth protecting. And you don't have to become interesting enough to deserve it.
Your life already belongs to you. Start acting like access to it is something people should have to earn.