Privacy fallacy