The Privacy Podcast with Fexingo: Data Protection, GDPR, and Digital Privacy Rights

Lucas and Luna reveal how online travel agencies like Booking.com, Expedia, and Airbnb share your trip details with data brokers, advertisers, and even governments. They trace the journey of a single hotel booking from search to resale, explain the legal loophole in GDPR's 'legitimate interests' clause, and offer concrete steps to protect your travel privacy. No alarmism, just the specific data fl...

Lucas and Luna explore how fitness trackers and smart gym wearables collect not just your steps, but your heart rate variability, sleep patterns, and even your location history—and how that data flows to health insurers, data brokers, and employers. They dig into a specific case: a 2025 investigation by the Norwegian Consumer Council that found popular gym wearables sharing detailed health metrics...

Episode 77 of The Privacy Podcast with Fexingo dives into the world of workplace productivity monitoring. Lucas and Luna explore how companies like Hubstaff and Teramind track keystrokes, mouse movements, and even facial expressions to measure employee performance. They discuss the legal landscape under GDPR, the blurred line between productivity and surveillance, and what workers can do to protec...

Lucas and Luna investigate how smartphone microphones can be used to trigger targeted ads even when apps appear idle. They examine a 2025 study by researchers at Northeastern University that found 23 popular Android apps sending audio metadata to ad networks without explicit user consent. The hosts break down the technical mechanism called 'ultrasonic cross-device tracking' where inaudible beacons...

Grocery store apps are a privacy blind spot. Lucas and Luna dig into how Safeway's loyalty app shares purchase data with third-party data brokers, how Instacart's 'smart cart' feature builds a detailed profile of every shopper, and why the grocery app on your phone might be tracking more than just your shopping list. They explore the specific data points collected — from the time you browse the da...

Lucas and Luna explore how usage-based car insurance apps collect your driving data — speed, braking, phone use, even where you park — and share it with data brokers. They focus on the case of Progressive's Snapshot device, which started as a plug-in dongle and evolved into a smartphone app that runs in the background. The hosts discuss how insurers adjust your premium based on this data, the priv...

Lucas and Luna explore how modern smart TVs are actually data-collection devices in disguise. They dive into the specific case of Vizio's 2017 settlement with the FTC over collecting viewing data without consent, and examine how Automatic Content Recognition (ACR) technology works to identify every show, movie, and ad you watch. The episode explains how this data is packaged and sold to advertiser...

Millions of students use school-issued laptops that come preloaded with monitoring software — programs that can see your screen, log your keystrokes, and even activate your webcam. In this episode, Lucas and Luna examine a specific case: a school district in Texas that used a program called 'GoGuardian' to monitor students 24/7, including after school hours and during summer break. They break down...

Episode 71 of The Privacy Podcast with Fexingo uncovers how smart kitchen appliances collect and monetize your household data. Lucas and Luna walk through a 2025 investigation by Consumer Reports into how refrigerator maker SmartCool's connected fridge was sending detailed usage logs — including when you open the door, what you store, and even voice snippets from its built-in mic — to three data b...

Episode 70 of The Privacy Podcast digs into a growing workplace surveillance trend: AI-powered attrition prediction. Lucas and Luna examine how companies like Amazon and JPMorgan Chase use employee data — calendar activity, email tone, badge swipes, and Slack messages — to forecast who will quit before they do. They walk through a 2025 case where a mid-level manager at a Fortune 500 firm was flagg...

Episode 69 of The Privacy Podcast examines Automated License Plate Readers (ALPRs). Lucas and Luna trace how a single plate scan at a traffic light becomes part of a vast data broker network, sold to insurers, repo agencies, and private investigators. They focus on a 2025 ProPublica investigation revealing that a company called Vigilant Solutions — now part of Motorola Solutions — maintains a data...

Lucas and Luna investigate a growing privacy concern: property technology companies that collect tenant data—from payment history to smart lock usage—and sell it to landlords and algorithms that set rent prices. They examine a 2025 class-action lawsuit against a major property management software firm, revealing how renters' personal data powers dynamic pricing models similar to airline tickets. T...

In this episode, Lucas and Luna explore the shadowy market for cell phone location data sold by commercial data brokers to law enforcement. They focus on a specific case: the U.S. Supreme Court's 2018 Carpenter ruling required a warrant for historical cell tower records, but police quickly found a loophole by buying the same data from vendors like Venntel and Fog Data Science. Lucas unpacks how th...

Episode 66 of The Privacy Podcast digs into a specific, documented case: in June 2024, researchers at Northeastern University published a study showing that Amazon's Alexa and Google Assistant devices routinely send short audio clips to third-party analytics firms, even after users explicitly opt out of voice recording collection. Lucas explains how the 'wake word' detection system actually works,...

In this episode, Lucas and Luna explore the unsettling reality of medical data reidentification. They focus on the 2024 study from Imperial College London that successfully reidentified 99.4 percent of supposedly anonymized health records using only age, gender, and zip code. The hosts break down how data brokers and insurers exploit these loopholes, the limits of the current HIPAA Safe Harbor sta...

Episode 64 of The Privacy Podcast dives into the hidden data trail left by coffee shop loyalty apps. Lucas and Luna examine how a popular chain's app collects your exact location, order history, payment method, and even the time you spend sipping your latte—then sells that data to third-party brokers. They break down a real 2025-2026 case where a Fortune 500 coffee retailer faced a class-action la...

In this episode, Lucas and Luna explore how podcast apps like Spotify and Apple Podcasts collect and share your listening data. They detail the types of metadata collected—including what you listen to, when, for how long, and even which episodes you skip—and how this feeds into advertising profiles. The discussion focuses on a 2025 study from the University of Oxford showing that 78% of popular po...

Episode 62 of The Privacy Podcast investigates the shadowy trade in your medical lab data. Lucas and Luna trace how routine blood test results — purchased from doctor's offices, lab chains, and pharmacy clinics — are de-anonymized, packaged, and sold to hedge funds betting on drug stocks, insurance underwriters, and even employers. They focus on one specific case: how a major data broker acquired...

Lucas and Luna explore browser fingerprinting—a tracking technique that identifies you by your device's unique configuration: screen resolution, installed fonts, graphics card, timezone, and dozens of other signals. Unlike cookies, you can't clear it. They break down how fingerprinting works, why it's nearly impossible to block, and what the new EU ePrivacy Regulation means for its use. Specific c...

Episode 60 dives into the hidden pipeline between fitness and health tracking apps and the insurance industry. Lucas and Luna examine how data from apps like Strava, MyFitnessPal, and period trackers is aggregated and sold to insurers for underwriting and pricing. They unpack a 2025 case where a major life insurer was found using anonymized step-count data from a popular health app to adjust premi...

When a loved one dies, their digital afterlife becomes a data battleground. Lucas and Luna explore how funeral homes, obituary websites, and online memorial platforms harvest and sell the personal information of the deceased. They examine the case of Legacy.com, which has faced scrutiny for selling visitor data from obituary pages. The hosts also discuss how state-level privacy laws like Californi...

Lucas and Luna dive into the surprisingly porous security of consumer Wi-Fi routers — the devices sitting in millions of homes that data brokers and hackers exploit. They break down a 2025 study from the Cyber Independent Testing Lab revealing that 67% of popular router models from 2023-2025 still ship with default admin credentials unchanged from the factory. Lucas explains how a single unpatched...

Episode 57 of The Privacy Podcast investigates how retail loyalty programs build permanent purchase histories that outlive the card itself. Lucas and Luna trace a single Tesco Clubcard transaction from 2012 to a 2025 data broker report used by auto insurers to adjust premiums. They explain how the GDPR right to erasure collides with aggregated analytics, and why deleting your account may not delet...

Episode 56 of The Privacy Podcast with Fexingo. Lucas and Luna reveal how your business invoices and purchase orders are being scraped by third-party data brokers and fed into pricing algorithms used by your competitors. They examine the case of a mid-size hardware distributor in Ohio whose net pricing and volume discounts were exposed through a routine credit application — then sold to a rival su...

Episode 55 of The Privacy Podcast. Lucas and Luna reveal how fake QR codes—often placed in hospital cafeterias, pharmacy waiting areas, or on parking meters—silently siphon patients' medical login credentials. They walk through a real attack at a Vancouver hospital where 1,700 patient records were compromised through a single malicious sticker. The episode explains how QR phishing ("quishing") exp...