The Privacy Podcast with Fexingo: Data Protection, GDPR, and Digital Privacy Rights

Episode 35 of The Privacy Podcast dives into the hidden surveillance capabilities of smart locks and access control systems in rental properties. Lucas and Luna reveal how landlords and property management companies can collect timestamped entry logs, geolocation data from app-based keys, and even share that information with data brokers without explicit tenant consent. They examine a 2025 class-action lawsuit against a major smart lock manufacturer over undisclosed data sharing with Facebook, and discuss the legal loopholes that allow this under current privacy laws. The episode also offers practical advice on what tenants can do to limit tracking, including disabling cloud sync and using offline-only lock models. If you've ever wondered why your smart lock app requests location permissions, this episode explains the real reason.

#SmartLocks #LandlordSurveillance #TenantPrivacy #AccessControl #DataBrokers #ClassActionLawsuit #FacebookDataSharing #PrivacyRisks #IoTDevices #RentalProperty #LocationTracking #EntryLogs #CloudSync #OfflineLocks #Technology #Privacy #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Smart home devices like thermostats, doorbells, and smart locks are collecting granular data about your daily life — and landlords are increasingly using that data to enforce lease terms, deny renewals, and even evict tenants. Lucas and Luna dig into a 2025 case from Austin, Texas, where a property management company used Nest thermostat occupancy logs to prove a tenant was subletting without permission. They break down the legal gray area of the US Fair Housing Act and the Stored Communications Act, explain why most smart home leases give landlords explicit access to device data, and explore the small but growing pushback from tenant rights groups like the Digital Privacy Alliance. If you rent and your unit came with a 'free' smart thermostat, this episode will change how you think about that device.

#SmartHomePrivacy #TenantRights #LandlordSurveillance #NestThermostat #DigitalPrivacyAlliance #FairHousingAct #StoredCommunicationsAct #AustinTexas #OccupancyLogs #Subletting #Eviction #PrivacyLaw #IoTData #DataBrokers #Technology #FexingoBusiness #BusinessPodcast #PrivacyPodcast

Keep every episode free: buymeacoffee.com/fexingo

In this episode of The Privacy Podcast, Lucas and Luna investigate how data brokers detect pregnancy and other life events before individuals choose to share them. They explore the case of Target's famous 2012 pregnancy prediction model, the modern data ecosystem that alerts marketers to health changes, and the legal gray areas under HIPAA and GDPR. Specific numbers include that 78 percent of parents surveyed by the Federal Trade Commission in 2022 were unaware that retailers could infer pregnancy from purchase patterns. The hosts also discuss practical steps listeners can take to limit this surveillance, such as using cash for sensitive purchases and reviewing loyalty program permissions. A subtle donation appeal ties to the week's topic of algorithmic inference.

#PregnancyTracking #DataBrokers #Target #HIPAA #GDPR #Privacy #ConsumerRights #AlgorithmicInference #LoyaltyCards #FTC #LifeEventData #PredictiveAnalytics #HealthPrivacy #MarketingSurveillance #Technology #FexingoBusiness #BusinessPodcast #OnlinePrivacy

Keep every episode free: buymeacoffee.com/fexingo

Episode 32 of The Privacy Podcast explores the data-collection machine behind grocery loyalty programs. Lucas and Luna break down how a single loyalty card at a supermarket like Kroger or Tesco can track not just what you buy, but when you buy, how you pay, and what aisle you linger in — and how that data gets sold to data brokers, insurers, and ad platforms. They examine a 2025 study showing that grocery loyalty programs collect up to 1,400 data points per customer per year, from purchase history to inferred dietary preferences. The hosts discuss the rise of personalized pricing, where your loyalty data determines the discounts you see — and whether you're paying more than your neighbor for the same cereal. They also cover the legal loopholes: in most US states, loyalty programs are exempt from opt-in consent requirements under current privacy laws. Lucas and Luna offer practical tips: use a separate email, pay with cash, and check your retailer's privacy policy for data-sharing clauses. No ad break — just a focused conversation on a privacy risk millions overlook every week.

#GroceryLoyaltyCards #DataBrokers #PersonalizedPricing #ConsumerPrivacy #RetailData #Kroger #Tesco #LoyaltyProgram #PurchaseTracking #PrivacyLoophole #InferredData #DietaryProfiling #CheckoutData #CashOnly #PrivacyTips #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Lucas and Luna dive into the hidden data pipeline from smart scales to health insurers. They reveal how a simple morning weigh-in can generate a stream of biometric data—body fat percentage, heart rate, even sleep patterns—that gets sold to data brokers and ends up influencing insurance premiums. The episode focuses on the case of Withings, whose smart scales share data with partners like Vitality insurance programs, and explains how the 2018 GDPR has failed to stop this practice due to vague consent language. Lucas breaks down the specific data points collected, the third-party sharing agreements buried in terms of service, and what consumers can do to opt out. Luna challenges whether the health benefits justify the privacy loss. A concrete, eye-opening look at the Internet of Things privacy gap.

#SmartScale #Withings #HealthData #Insurance #DataBrokers #GDPR #Privacy #IoT #Biometrics #Vitality #Consent #TermsOfService #OptOut #BodyFat #HeartRate #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Lucas and Luna investigate how popular health and fitness apps share sensitive user data — from menstrual cycles to sleep patterns — with advertisers and third-party trackers. They examine a 2023 study of 20 top health apps from the Apple App Store and Google Play Store, which found that 18 of them shared user data with Google, Facebook, or other ad platforms. The hosts break down the specific types of data transmitted, the legal loopholes apps exploit under HIPAA and GDPR, and what listeners can do to protect their privacy. They also discuss the FTC's recent enforcement action against a fertility tracking app. A practical episode for anyone who uses a health app and wants to understand what happens to their data.

#HealthApps #DataPrivacy #AdTracking #FTC #HIPAA #GDPR #FertilityTracking #MobileApps #ThirdPartyTrackers #PersonalData #Technology #PrivacyPolicy #AppStore #GooglePlay #DigitalRights #FexingoBusiness #BusinessPodcast #DataProtection

Keep every episode free: buymeacoffee.com/fexingo

Episode 29 of The Privacy Podcast with Fexingo uncovers how modern vehicles collect and share vast amounts of personal data. Hosts Lucas and Luna reveal that the average connected car generates up to 25 gigabytes of data per hour — including location, driving habits, biometrics, and even in-cabin audio. They discuss a 2025 Mozilla investigation that rated all major car brands as 'privacy nightmares,' how insurers and data brokers buy vehicle data, and why existing privacy laws like GDPR and CCPA barely cover cars. Lucas explains the difference between telematics data collected by manufacturers and data shared with third parties, while Luna asks what listeners can do to protect themselves. They close with practical steps: checking your car's privacy portal, disabling data sharing in settings, and why you should treat your car like a smartphone when it comes to permissions.

#ConnectedCars #VehiclePrivacy #DataBrokers #Telematics #CarData #GDPR #CCPA #Mozilla #PrivacyRights #Tracking #Insurance #Biometrics #LocationData #SmartCar #Technology #FexingoBusiness #BusinessPodcast #PrivacyPodcast

Keep every episode free: buymeacoffee.com/fexingo

Lucas and Luna uncover how smart TVs use Automatic Content Recognition (ACR) to listen to what you're watching and feed that data into ad-targeting systems. They walk through the specific case of Vizio's Inscape division, which collects viewing data from millions of TVs and sells aggregated insights to advertisers and media companies. The conversation covers how ACR works technically, why the 2019 FTC settlement with Vizio set a precedent for opt-in consent, and what the current regulatory patchwork means for consumers trying to protect their viewing privacy. Luna shares a personal anecdote about getting an ad for a show she watched the night before, and Lucas explains why the practice persists despite privacy laws.

#SmartTV #ACR #Vizio #Inscape #DataPrivacy #AdTargeting #FTC #GDPR #CCPA #ConsumerRights #Television #Streaming #DataBroker #OptIn #ViewingData #PrivacyLaws #FexingoBusiness #TechnologyPodcast

Keep every episode free: buymeacoffee.com/fexingo

Lucas and Luna investigate the shadowy market for prescription data. When you fill a prescription at the pharmacy, your medication name, dosage, and doctor's details are sold to data brokers who then package and resell that information to pharmaceutical companies, insurers, and even employers. Lucas reveals that one major broker, IQVIA, processes over 150 billion prescription transactions annually, and that your name is often not anonymized as promised. They discuss the specific loophole in HIPAA that allows this trade, the real-world consequences—like higher insurance premiums and targeted drug marketing—and what a listener can do to opt out. The episode centers on a 2023 lawsuit against data broker Surescripts for monopolizing prescription-data routing, which exposed how deeply personal health information flows without patient consent.

#PrescriptionData #DataBrokers #HealthPrivacy #HIPAA #IQVIA #Surescripts #PharmacyData #MedicalRecords #PrivacyLoophole #OptOut #DataSelling #DrugMarketing #Insurance #HealthData #Technology #DataPrivacy #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 26 of The Privacy Podcast digs into a hidden data flow: how hospitals and health systems sell patient data to data brokers and advertisers. Lucas and Luna walk through the legal loophole — HIPAA's de-identification standard — and how a 2024 Wall Street Journal investigation found that 94 percent of US hospitals share data with third parties including Facebook and Google. They examine the real-world case of MultiCare Health System's 2025 settlement after a patient sued over a Facebook pixel on the patient portal. The episode also covers what you can do to opt out, why your consent form probably allows this, and whether the proposed Health Data Use and Privacy Act of 2025 would close the loophole. A concrete, unsettling look at medical privacy in the age of ad tech.

#HIPAA #DataBrokers #MedicalPrivacy #PatientData #HealthData #FacebookPixel #MultiCare #OptOut #WSJInvestigation #AdTech #PrivacyLoophole #DeIdentification #HealthDataUseAndPrivacyAct #Technology #FexingoBusiness #BusinessPodcast #ThePrivacyPodcast #DigitalPrivacy

Keep every episode free: buymeacoffee.com/fexingo