News
Help with your donation!
Even small amounts help us with our work, and we are especially happy about standing orders.
09.01.2026 · Peter Bernscherer · Share on Facebook · Share on X (Twitter)
Data protection: From misunderstanding to actual threat
The common understanding of data protection falls short.
Most people think of data protection as the protection of their personal content – photos, messages, private documents. But... nobody really cares about Uncle Erwin's Mallorca selfies from 2001. This content has practically no value to third parties.
The real danger lies in the metadata:
When you were where (location data)
Who you communicate with (contact networks)
How often and for how long (usage patterns)
Which websites, apps, services you use
When you sleep, work, are active
Where metadata is created and collected:
Smartphones: Each app logs usage times, GPS data, contacts, and Wi-Fi connections.
browser: Websites visited, time spent on site, click paths, search history
Messenger & Email: Who writes to whom, when, how often (even with encrypted content!)
Social media: Likes, shares, comments, scrolling behavior, dwell time
Smart Home: When lights turn on/off, heating, door lock, voice assistants
Payment details: Credit cards, PayPal, and banking apps reveal purchasing behavior and locations.
Streaming services: What you watch, when and for how long, pausing behavior, drop-offs
Fitness tracker: Sleep rhythm, movement patterns, health data
Cars & Traffic: Navigation systems, public transport maps, car sharing, e-scooters
Public cameras & Wi-Fi: Movement profiles in cities, shopping centers, train stations
These metadata allow for the creation of frighteningly accurate profiles: political beliefs, health status, financial situation, sexual orientation, psychological vulnerabilities – all without having read a single letter or seen a single photograph.
A former NSA director reportedly put it this way: "We kill people based on metadata." Metadata doesn't reveal what you say, but rather who you are, what you do, and how you can be influenced.
True data protection should therefore primarily protect these behavioral patterns, movement profiles and relationship networks – not Aunt Hilde's beach photos.
