Another troubling example of inference involves your phone number. Even if you have stayed off Facebook and other social media, your phone number is almost certainly in many other people’s contact lists on their phones. If they use Facebook (or Instagram or WhatsApp), they have been prompted to upload their contacts to help find their “friends,” which many people do.
Once your number surfaces in a few uploads, Facebook can put you in a social network, which helps it infer things about you since we tend to resemble the people in our social set. (Facebook even keeps “shadow” profiles of nonusers and deploys “tracking pixels” all over the web—not just on Facebook—that transmit information to the company about your behavior.)
In 2018, an investigation revealed that Verizon, T-Mobile, Sprint, and AT&T were selling people’s real-time location data. And other recent inquiries showed that weather apps, including the Weather Channel, AccuWeather, and WeatherBug, were selling their users’ location data. This kind of data is useful not just for tracking you but also for inferring things about you, like why you were at a doctor’s office.
What’s to be done? Designing phones and devices to be more privacy-protected would be a start, and government regulation of the collection and flow of data would slow things down. But we also need laws that directly regulate computational inference: What will we allow to be inferred, under what conditions, and subject to what kinds of accountability, disclosure, controls, and penalties for misuse?
Until we have good answers to these questions, you can expect others to continue to know more and more about you—no matter how discreet you may have been.