Privacy loophole