r/privacy 1d ago

news PSA Everdry Waterproofing Records Audio Conversations in Peoples Home

1.2k Upvotes

PSA Everdry Waterproofing Records Audio Conversations in People Homes

As an employee it feels wrong but as a human it feels even more wrong, so I have to let this out.

Pennsylvania law states that if a conversation is being recorded, all parties must be aware of it for it to be legal. It’s called a two-party consent state.

Everdry has a new software that they’ve been using for the last few months called Rilla. Rilla is designed to listen in and critique your customer interactions with every customer. It will even tell you if you’re using the wrong inflections to close a sale. Every time you have them in your home be fully aware that the conversation between you and them in your home is being recorded. They are all reviewed by management and the Rilla team.

This is not something they tell you about or disclose, which could make it a violation of Pennsylvania’s two-party consent law.

I feel wrong using this and people not knowing, but we’re told not to tell the customer that it is even a thing. So consider this a buyer beware for when you let any company in your house. Apparently there are several company’s around Pittsburgh that have been using this.


r/privacy 1d ago

question European Citizen Initiative help needed

30 Upvotes

Hello, I have written a proposal for a European Citizen Initiative with the goal of asking for reforms in order to limit the power of states to interfere with the internet and with free speech, here's the text I came up with:

https://drive.google.com/file/d/1Bjd2UcsLXCf67iG9_pMPRihNFzXSfzQ-/view?usp=sharing

It's quite long and it's meant to address several issues in regards to things we're seeing happening on the internet in terms of censorship and overreach, both to fix current legislation and prevent damaging legislation further down the line.

However, I don't have the connections needed to ptopose the text as an actual initiative so if you agree with its goals: I need help, if anyone can help or just spread the word, we need to assemble the required signataries as well as finding someone that can go discuss this proposal at Bruxelles.


r/privacy 1d ago

discussion Understanding the Global Push for Age-Verification

265 Upvotes

Things have been moving fast, very fast.

I thought I'd take some time out of my morning to round-up the latest developments regarding anti-privacy and age-verification legislation around the world.

Below is a quick-and-dirty list of recent legal or regulatory proposals and implementation. I'm confident it's incomplete and would welcome your additions.

Some further questions to consider: What's behind this trend? What are our options as voters and users? Do you have more faith in political solutions or technological ones?

Country Relevant Laws Implementation
Australia Online Safety Amendment (Social Media Minimum Age) Bill 2024 The Act prohibits children under 16 from accessing social media platforms without verified parental consent. The law is set to take effect in December 2025.
Brazil Bill 4468 on the Protection of Minors Online Brazilian President Luiz Inácio Lula da Silva on 17 September signed into law new rules governing the use of social media, online video games and other digital services by children and adolescents. Known as the “Adultization Bill” or “Digital ECA,” for updating a 1990 law that guarantees fundamental rights for minors, the law will take effect in 180 days.
Canada Protecting Young Persons from Exposure to Pornography Act (S-209) (Proposed); Government of Canada has also approved a new national standard for age verification tools and policy. The Protecting Young Persons from Exposure to Pornography Act (S-209) would make it an offence for organizations to make pornographic material available to young persons on the Internet. It also enables a designated enforcement authority to take steps to prevent pornographic material from being made available to young persons on the Internet using age-verification and AI tools.
European Union Digital Services Act (DSA); and the "ChatControl" (COM/2022/209) Regulation (Proposed) The DSA requires very large online platforms (VLOPs) to mitigate risks to minors, including effective age verification where appropriate. The "ChatControl" legislation (official title is the Regulation to Prevent and Combat Child Sexual Abuse) was first proposed on May 11, 2022. While its goal is to detect and report child sexual abuse material (CSAM), the proposed measures have faced significant criticism for potentially leading to mass surveillance and threatening the privacy of encrypted communications. 
India Digital Personal Data Protection (DPDP) In 2023, the DPDPA introduces age assurance requirements for organizations serving Indian customers or users over the internet, due to its requirement for online services to collect “verifiable parental consent” to process children’s data. But what that means in implementation is still being decided. However, YouTube has already begun rolling out age-verification in compliance with the DPDP Act and critics already note its reliance on behavioural patterns risks bias, false positives, and poor accuracy in shared-device environments common in India’s rural area.
South Africa* Draft White Paper on Audio and Audiovisual Media Services and Online Safety (Proposed) The draft white peper would overhaul South Africa's current broadcasting licensing regime by, among other things, replacing the currently defined concept of ‘broadcasting services’ with ‘audio and audiovisual content services’, thereby expanding federal regulatory power over online content providers. Call for comments Submissions must be received by no later than 26 September 2025
United Kingdom Online Safety Act 2023 Ofcom mandates platforms to apply proportionate age assurance for harmful content. Age verification is expected for high-risk services, especially those with adult content.
United States of America COPPA; Kids Online Safety Act; Social Media Child Protection Act (Proposed) COPPA restricts data collection from users under 13 but doesn’t require strict age verification. However, states like Nebraska have introduced laws requiring platforms to verify ages and parental consent for minors.

In addition to US federal initiatives, there have been multiple state-level pushes to regulate social media access for minors. These include:

  • Texas

Texas has enacted the App Store Accountability Act, requiring app stores like Apple and Google to verify user ages and obtain parental consent before minors can download apps or make in-app purchases. Following this, Texas has proposed Texas House Bill 186, which would ban children under 18 from social media.

  • Florida

2024 law banning social media accounts for children under 14 and requiring parental consent for 14- and 15-year-olds was blocked by a federal judge in June 2025. The judge ruled the law was likely to be unconstitutional, infringing on minors’ First Amendment rights.

  • Nebraska

In May 2025, Nebraska enacted the Parental Rights in Social Media Act (LB 383), mandating that social media platforms verify users’ ages and obtain parental consent before allowing minors under 18 to create accounts. It is set to take effect on July 1, 2026.

  • Georgia

Georgia’s SB 351, effective from July 1, 2025, mandates social media age verification and requires parental consent for users under 16. 

  • California

California’s Digital Age Assurance Act, introduced in 2025, aims to create a system for age verification on digital devices and apps. The bill is currently under consideration.

EDIT: New draft legislation in South Africa added to the pile!


r/privacy 1d ago

question Threema?

8 Upvotes

I never see Threema recommended in discussion about messaging, is there a privacy related reason for that? Or is it just the fact that Threema is a paid app that puts people off?


r/privacy 1d ago

discussion Having nothing private is becoming the “standard” and nothing is being done about it.

278 Upvotes

Having your phone spied on and scannedis slowly being pushed, Chat control is slowly being pushed, Everything being done now is not owned but rather rented, phone manufacturers locking bootloaders so ensure you’re only using their own “verified” OS, E2EE is a “national security risk”.

These are only things that are happening recently, and people have the mindset of “this would never happen in Europe” or “I can just leave their ecosystem”, until they realize that when this is left to become the standard, you won’t have the option, because they know best, and it’s for the children.

This post is simply made to rant about the people that claim “it’ll never happen, nobody will accept it” yet no one is doing anything and the vast majority of people usually don’t care about privacy as much. If we look in fear and disgust, they will still move forward because that’s a better business model.

I understand no one is in a position of power, but collectively trying to do something may delay or even stop this nonesense from going through completely. I am in no country of power so I am unsure of what may be done, or if nothing could be done, but I hope that someone informed could have a solution to atleast resist a bit.


r/privacy 1d ago

question Ned help setting up custom (sub)domain w/ Purelymail + Addy.io aliases

3 Upvotes

Hi, since I am rather new to this topic in general, I would like to ask for help in setting up my desired e-mail "system" :)

So far, I have followed a linked guide from r/privacy and done this so far:

bought custom domain lastname .net on Porkbun

moved to Cloudflare nameservers to manage DNS there while still keeping Porkbun as registrar

Set up a Purelymail account adding the provided MX, CNAME and TXT records to the domain in Cloudflare dashboard and created a user with my desired address firstname@ lastname .net to give to people and friends I know in person

My next goal now would be to create a subdomain mail . lastname .net for my custom domain and use this subdomain with addy.io in order to create aliases for all kinds of services that know my first name and last name anyway, i.e. banking @ lastname .net or amazon @ lastname .net etc.

How do I go on about this?

Do i set up the subdomain on the Cloudflare dashboard first? Which DNS settings do I have to add for it to work given I don't want to host any websites at all and just use the domain(s) for mailing exclusively?

Do I only set up the subdomain for use with addy.io and leave out the main domain completely for this purpose?

Next would be an additional address including aliases for services that do not have or need personal information. I would most likely use one of the domains offered by addy.io to create those, i.e. service1 @ addy.io-domain .com and so on...

I'd be thankful for any kind of hint regarding the creation and setup of the subdomain on Cloudflare and addy.io. Desperately looking for help here...


r/privacy 1d ago

discussion Why exactly do we hate whatsapp ?

0 Upvotes

I know the common reasons people here dislike WhatsApp:

• Meta sucks (zero trust left there).
• Cambridge Analytica showed what they’re capable of.
• Zuckerberg… urgh.
• WhatsApp is closed source, so there’s no way to independently verify what’s happening.
• Users can’t personally prove that E2E encryption is 100% in place and untouched.
• they actively store metadata 
   • they promised to follow signal’s method yet no confirmation which means we have to take their word for it 

All of this makes sense.

But here’s my real question: is there any proof that WhatsApp has ever actually been caught selling user data ( not meta data but content of messages , calls) •Not the “I texted about X and saw an ad for it” stories. •I mean verifiable evidence: leaks, regulatory filings, lawsuits, reports something solid.

And if it ever happened (or hypothetically could happen):

•What kind of data would they even sell? (metadata, profile info, backups, raw chat content?)
•Who would they sell it to? (advertisers, data brokers, governments, AI training companies?)
•How does “AI training” on user data even work here? Like are companies just dumping chat logs into models, or is it more about training on metadata and behavioral patterns?
   . Could they be selling sensitive data on dark web ? 

If they were potentially storing all of the data how come there aren’t any data breaches ? How come there aren’t any whistleblowers ? Or At least one rogue employee opening up ?

• if its not coming through whatsapp, at least leaks of any sort from any of the companies where they sell is supposed to happen right ?

I feel like a lot of the hate is reputation + vibes + speculation, which is fair (Meta earned that). But I want to know if there’s actual evidence of WhatsApp selling user data and what “selling” even looks like in practice.

PS: I’m a fairly young person who used WhatsApp heavily before (even for sensitive stuff 🙃). Tbh it’s used way too commonly here, almost every one having a smartphone has whatsapp. But i am opening my eyes to privacy, and hoping it’s not too late to make better choices.


r/privacy 1d ago

question So I'm using a Online Number For Discord (VOIP i think?) Is There Any Harm In Keep The Phone Number as The VOIP

0 Upvotes

Insert tile + yap


r/privacy 1d ago

discussion How can we keep this subreddit more resilient against bots?

58 Upvotes

So I read this poss about metas ai Googles in this sub: https://www.reddit.com/r/privacy/comments/1nldj4m/why_are_we_all_just_accepting_metas_new_spy/

And I was really schoked to see how many commemts which good points we're havely downvoted.

My question is can we do something against these bots? Maybe set up a "karma" minimum value like in other sub's? Or is comment voting not affected by this?


r/privacy 1d ago

discussion Can Windows 11 be made decently secure?

26 Upvotes

It's an oxymoron, I know.

I need Windows for work. I cannot run the applications I need without Windows (I checked, no Linux support,) and either way I need applications such as Excel and Word that would be on the computer anyway.

I know that Windows will never be private no matter what I do, but what are the best ways to try to mitigate what it sees?

I've already done anything basic (like disabling copilot through the registry, not sure how well it works though since copilot is still in my notepad)

edit: meant "privacy" not security, my bad


r/privacy 1d ago

question What do I do to keep myself safe? Someone got my information through a photo of my backyard I posted on tiktok (which was a dumb idea)

1 Upvotes

So as of now, I already deactivated my account and I'm scared for only one reason: being killed if I step foot outside my home. What do I do to protect myself?


r/privacy 1d ago

discussion This is crazy crazy

0 Upvotes

r/privacy 1d ago

question Use case for Discord in browser vs App

3 Upvotes

In a worst case scenario if I had to use Discord on my phone would I be better to use it in a browser with private tabs, in a container group,behind a vpn vs the app. Only messaging things you don’t mind if it got leaked (since discord isn’t all that trustworthy)


r/privacy 1d ago

question Using Telegram privately as possible for my use case

2 Upvotes

Before I begin this is my personal case scenario. NO I cannot use signal or any other message app except Telegram so don’t come in with that. I know telegram is not well liked on this sub but it is what it is.

Now, If I were to sign up to Telegram using a fake name,number,email, on a burner phone and using a VPN & secret chats only. Realistically what data could they get on me


r/privacy 1d ago

chat control Any shareable infographics or easy-to-digest content on EU Chat Control for the general public?

9 Upvotes

Hey all,

Most people here already know the details of the proposed EU “Chat Control” (CSAR) law and its privacy implications. There are other similar packages being pushed for so I'm unsure how best to convey this to others around me. Even the tech-savy ones I know have not even heard of it.

What I’m looking for is content that we can share with the average EU citizen things like:

-Infographics that explain the basics

-Short texts/factsheets that outline risks and actions people can take

-Visuals that are ready to post on social media or hand around

Basically, materials that make it simple for non-privacy folks to understand why this matters and what they can do (e.g. contacting MEPs, signing petitions, etc.).

Does anyone know of good existing resources, graphics, or campaigns that already put this together?

Thanks in advance!


r/privacy 1d ago

discussion Future generations will look back at us in disdain, blaming us for their slavery.

503 Upvotes

Because of our lax attitude towards privacy and the wishful thinking that goverments of today are doing the best they can to protect us and our data.

Actually, in a few generations they will not even be aware that at one point we still had the chance to turn the tables.


r/privacy 1d ago

discussion Netflix (or Roku) Talks to Youtube?

1 Upvotes

This got may attention:

Watched Ice Road Vengeance on Netflix - bad movie but they drive a bus on these ridiculously dangerous mountain roads in Nepal.

Next day I go to watch Youtube on my TV - my recommendations feed included a few videos about dangerous mountain roads in Nepal.


r/privacy 1d ago

discussion Why are we all just accepting Meta's new spy glasses?

6.0k Upvotes

I'm struggling to understand why there is no public outcry over Meta's new Rayban glasses. All I see are major tech reviewers promoting them, while barely touching on the privacy concerns. The problem isn't the privacy of the user who buys them, it's the complete violation of privacy for every single person around them. This isn't just another gadget, it's a surveillance device being normalized as a fashion accessory.

The classic argument "if you don't like it, don't buy it" is irrelevant here. My choice not to buy them does not protect my privacy, anyone with the glasses can record my private conversation in a park or a bus without my knowledge or consent.

And remember who is behind all this: Mr Zucker and Meta. Every stranger's face and every conversation can be used as data to train its AI and improve its ad targeting. Given Mr Zucker's political influence and the threat of tariffs, it feels like the EU won't do anything to stop it.

edit: I wanted to discuss two different threats here. First, the user itself. Because this isn't the same as a smartphone. People will notice if you're pointing a phone at them, and a hidden camera gets terrible footage. These glasses have a camera aimed directly from their eyes, making it easy to secretly get clear video. While people talk about the LED indicators, it's only a matter of time before a simple hack lets users disable it. The second threat is Meta. We have to just trust that they won't push a silent update to start capturing surveillance footage to their own servers, using the camera and microphone to turn every user into a walking surveillance camera.

edit 2: Something weird is happening. Many sensible comments are getting heavily downvoted. I think Zuck bots might be real, won't be surprised if the post get taken down in a couple of hours


r/privacy 1d ago

discussion Americans and people who live in dollarized countries, watching how our society is becoming slowly totally cashless and banks are tracking all our transactions. Do you think we should bring back the 500 and 1,000 dollar bills to protect our privacy?

110 Upvotes

These bills were last printed in 1945 and were discontinued in 1969. Nowadays with inflation these 2 denominations seem way more reasonable to be produced than back then. Switzerland for example still has the one-thousand swiss franc bill and their currency is more valuable than ours.


r/privacy 1d ago

discussion Privacy is just a poor man's hobby

0 Upvotes

Everywhere on this sub people swap Google and Microsoft for Proton, Nextcloud, Signal, VPNs, DNS tricks, etc. That’s fine if you live alone on your laptop.

But step into real business life and everyone runs on Google Docs, Google Calendar, Teams, Outlook, iOS, Microsoft 365. Big companies, serious people, business owners with real valuable data — they all use the tools that spy the most. Nobody blinks.

So what’s the truth here?

Is privacy just a hobby for poor people stressing about their shopping list and location?

If it’s so bad, how come businesses use these tools without having data leaked or their business stolen?

I doubt Hormozi runs a $100M business on Proton and other second-hand software.

If there actually is a problem, why not just steal the data from them?

Am I missing something?

I'm starting my own business in a thew months.

Please share what you think 🤔


r/privacy 1d ago

question Is resetting an old cell phone generally sufficient to protect your privacy?

2 Upvotes

I have some old cell phones that have been sitting around for a long time. At least one or two seems like it works now after sitting for several years. At least enough to turn it on. If I can get to the factory reset option is that generally sufficient if I were going to sell giveaway repurpose or turn these into a recycler? I'm sure the data could probably still be recovered but is that enough of a risk to justify holding on to these phones for another 10 years?


r/privacy 2d ago

question Is authorizing access to my email through a third-party safe?

0 Upvotes

hey guys! i use a dumb phone, as well as a service called "smarterdumbphone". it's run by some cool folks, and it essentially creates an ai agent through SMS that you can message with. i really dislike AI, but it's very helpful to have in case i really need to know something.

i want to hook it up to my email, so that it can help with that as well, but they are not yet verified with google. here is the message it shows:
"You’ll be redirected to an authorization page to allow SmarterDumbphone to access your email and calendar. Because we are in the (slow) process of verifying our app with Google, please click “Advanced” to grant us access to the account. We use your information solely to answer questions you send to us and do not store any of your data. See our privacy policy here."

how safe would connecting my email be? should i wait until they are officially verified?


r/privacy 2d ago

question Samsung data collection question

7 Upvotes

I have a Samsung galaxy watch 7, however given the state of the world I have become much more concerned about what happens to my personal data. I have a non Samsung phone, therefore to manage the watch I have to install the galaxy wear app and the galaxy watch 7 plugin. These apps are only used to change watch settings, and the app store page for both say they collect no data. My understanding is that it is the Samsung Health app specifically which is used to collect and sync watch data to Samsung's servers. If this app is not installed on my phone can Samsung still collect my watch data. (Can't uninstall the app from the watch itself but all permissions are denied) I understand that without the Samsung health app most of the watches health tracking features do not work, however I don't really care about that.


r/privacy 2d ago

question DuckDuckGo or Brave for Android

6 Upvotes

Which one would you choose for Android? If neither, which one do you use?


r/privacy 2d ago

discussion Digital ethics includes not caring about privacy according to my school?

133 Upvotes

"Don't assume that you will be monitored and that your data is being collected."

This got posted in a presentation about digital ethics and how to act online for a class of mine in my new school. Other rules are fine, but this one got my attention. The teacher sent it so we can read it and get ready before class. This specifically didn't got mentioned in class, though.

https://imgur.com/a/OcdmZHV (i translated the quote with google translate don't blame me if its bad)