Costco shares members' purchase history, payment method, and visit frequency with its financial-services partners.
So what: loyalty programs trade a discount for a purchase dossier. Sign up with an email alias and a Google Voice number, or skip it.

Costco shares members' purchase history, payment method, and visit frequency with its financial-services partners.
So what: loyalty programs trade a discount for a purchase dossier. Sign up with an email alias and a Google Voice number, or skip it.
AI tools train on your chats by default. Turn it off. In ChatGPT: Settings > Data Controls > "Improve the model for everyone." In Gemini: pause your activity history. On LinkedIn: turn off data use for generative AI.
So what: it's Opt Out October. Do it this month.
We read the privacy news so you don't have to. One story, clearly explained, every Monday morning. #indigoprivacy https://indigoprivacy.com/
Retail media networks operated by Amazon, Walmart, and Kroger sell advertising that targets consumers based on.
So what: loyalty programs trade a discount for a purchase dossier. Sign up with an email alias and a Google Voice number, or skip it.
We read the privacy news so you don't have to. One story, clearly explained, every Monday morning. #indigoprivacy https://indigoprivacy.com/
VoIP phone providers that use carrier networks collect call metadata and in some cases audio recordings.
So what: move sensitive conversations to Signal, and use an email alias for signups so your real inbox stays clean.
Researchers found a phishing kit posing as AI ad tools (Muse, ChatGPT, Gemini) that fakes a Google sign-in window inside your browser to steal passwords and MFA codes. It can fake a lock icon and URL bar, not the real browser's address. So what: use passkeys.
Privacy Guides (privacyguides.org) is a free, nonprofit site that recommends privacy-respecting tools: browsers, email, VPNs, password managers. Criteria-based, open-source first. No ads, no pay-for-placement. So what: picking a big-tech swap? Decide there.
We read the privacy news so you don't have to. One story, clearly explained, every Monday morning. #indigoprivacy https://indigoprivacy.com/
Social media analysis companies sell hospitals reports on patient communities, including which patients post about pain, depression.
So what: under HIPAA you can get your medical records and a list of who they went to. Request both, and correct anything wrong.
This week in privacy: DriveWealth breach exposed Social Security numbers for 2.5M+ people. A Pentagon DMDC breach hit nearly 3M service members and dependents.
So what: install a free app that flags nearby trackers and Flock cameras.
We read the privacy news so you don't have to. One story, clearly explained, every Monday morning. #indigoprivacy https://indigoprivacy.com/
The EFF just launched Opt Out October, a free guide to taking your data back: the settings to flip, the platforms to drop, and better alternatives, from AI training to social media to leaving Windows. So what: pick one thing to opt out of this month at eff.org.
We read the privacy news so you don't have to. One story, clearly explained, every Monday morning. #indigoprivacy https://indigoprivacy.com/
Cybernews found 48% of router apps collect your name, email, phone, and address through the vendor cloud. Two fixes: put smart-home gadgets on a separate guest network, and set an encrypted DNS resolver like Quad9 (9.9.9.9). So what: do it tonight.
We read the privacy news so you don't have to. One story, clearly explained, every Monday morning. #indigoprivacy https://indigoprivacy.com/
Consumer DNA databases expose your relatives too, even ones who never sent a sample.
So what: you can delete your genetic data. Download a copy if you want one, then request permanent deletion in your account settings.
LinkedIn allows companies to use its data to identify which employees are updating their profiles and may be seeking new.
So what: assume anything on a work device or network is monitored. Keep personal browsing on your own phone, off company Wi-Fi.
Meta disputes a journalist's claim that its Muse AI agent read his private Messages without permission. Meta says it's opt-in and needs Full Disk Access; he says that access was off. So what: don't give AI agents Full Disk Access or your Messages.
Quad9 is a free public DNS resolver run by a Swiss nonprofit. Point a device or your whole router at 9.9.9.9 and it blocks known phishing and malware sites before you connect. It doesn't store your IP or sell your data.
So what: set 9.9.9.9 on your router.