June 17, 2026 · Peter Bernscherer
The common understanding of data protection falls short. Most people think of data protection as the protection of their personal content – photos, messages, private documents. But... nobody really cares about Uncle Erwin's Mallorca selfies from 2001. This content has practically no value for third parties. The real danger lies in the metadata: When and where you were (location data), who you communicate with (contact networks), how often and for how long (usage patterns), which websites, apps, and services you use, when you sleep, work, and are active. Where metadata is generated and collected: Smartphone: Every app logs usage times, GPS data, contacts, and Wi-Fi connections. Browser: Websites visited, time spent, click paths, and search history. Messenger & Email: Who writes to whom, when, and how often (even with encrypted content!). Social Media: Likes, shares, comments, scrolling behavior, and time spent. Smart Home: When lights are on/off, heating is activated, door locks are used, and voice assistants are activated. Payment data: Credit cards, PayPal, and banking apps reveal purchasing behavior and locations. Streaming services: What you watch, when, and for how long, pause behavior, and interruptions. Fitness trackers: Sleep patterns, movement patterns, health data; cars & traffic: navigation systems, public transport maps, car sharing, e-scooters; public cameras & Wi-Fi: movement profiles in cities, shopping centers, train stations. From this metadata, frighteningly precise profiles can be created: political convictions, health status, financial situation, sexual orientation, psychological vulnerabilities – all without having read a single letter or seen a single photograph. A former NSA director allegedly put it this way: "We kill people based on metadata." Metadata doesn't reveal what you say, but who you are, what you do, and how you can be influenced. True data protection should therefore primarily protect these behavioral patterns, movement profiles, and relationship networks – not Aunt Hilde's beach photos.
read more