Watchdogs who hold companies to account for how they collect, protect and use personal data.
Watchdogs of data privacy, security, and consent — surfacing breaches, leaks, surveillance, and non-consensual data scraping, and holding brands accountable for weak practices. They treat how a company handles data as a measure of its character.
Aesthetic markers
- annotated network-traffic captures or permission dumps exposing what a product collects
- breach-notification screenshots timelined against the company's public silence
- side-by-side privacy-policy diffs highlighting a quiet expansion of data use
- “what this app actually sends” teardowns and tracker-blocklist evidence
- sober, forensic framing — severity conveyed through documentation, not alarm
Value systems
- consent, data minimization, and purpose-limitation as baseline obligations
- prompt, honest breach disclosure over legal-team obfuscation
- end-to-end encryption and local processing over convenient surveillance
- users' data as theirs — not an asset to be scraped, sold, or trained on
- security competence read as a proxy for whether a brand can be trusted at all
Conversion behaviours
- a breach or quiet policy change triggers accountability threads and churn
- products are vetted on data practices before adoption; trackers are dealbreakers
- non-consensual scraping or training-on-user-data provokes legal and community backlash
- incident-response speed and candor are judged as harshly as the incident itself
- privacy-respecting alternatives are amplified as the corrective recommendation
Demographic crossovers
- security researchers and breach-disclosure communities as the core
- privacy advocates and digital-rights organizations (EFF-adjacent)
- local-first and self-hosting crowds overlapping on data sovereignty
- regulators, journalists, and class-action-aware consumers post-incident
- enterprise security and compliance buyers demanding audits and guarantees
Signal patterns
- data breach, leak, or security lapse at a company
- privacy or surveillance concern about a product or feature
- non-consensual scraping or training-consent controversy
- regulatory or legal action over data or security practices
- quiet privacy-policy expansion / consent dark-pattern callout
Brands named in a profile are illustrative examples drawn from coverage, not measurements. Brand-level readings are available to clients.