Here is the normal we have all quietly accepted. You wake up, your phone has already logged where you slept. You check email on Gmail, search something on Google, message a friend on WhatsApp, pay for coffee with a card, and walk past a dozen cameras before lunch. None of that feels like surveillance. It feels like Tuesday.

I want to walk you through why that Tuesday looks very different in 2026 than it did even five years ago, and why I think the comfortable version of privacy (“I have nothing to hide”) has quietly stopped being true. Three things are happening at once, and the combination is what should worry you, not any one piece on its own.

Trend 1: Mass Data Collection Is Complete

Start with the part nobody disputes anymore. Every email, every text, every call, every location ping, every purchase, every search query gets collected somewhere. The Snowden revelations landed in 2013. We have had thirteen years to make our peace with it, and most of us did.

What changed is the completeness. In 2013 the collection had gaps. Today the data portrait of any person in the developed world is essentially finished. Your digital twin lives in dozens of databases at once: government, corporate, criminal.

Look at what is already known about you:

  • Every website you have visited (ISP logs, browser fingerprinting)
  • Every location you have been (cell tower triangulation, GPS, WiFi positioning)
  • Every purchase you have made (payment processors, loyalty cards)
  • Every person you have communicated with (metadata from every platform)
  • Every photo you have taken (cloud backups, facial recognition databases)
  • Every word you have typed (keyboard apps, autocomplete training data)

This data exists. It is stored, indefinitely. The open question was never whether someone could assemble a complete profile of your life. It is who already has, and what they plan to do with it.

What If You Could Just Opt Out

Now picture the other version of that morning. Your email lands on a server in your own house. Your photos sync to storage you control. Your passwords live in a vault only you hold the keys to. The coffee still gets paid for, the cameras are still on the street, but the bulk of your digital life is no longer sitting in someone else’s database waiting to be queried.

That is not a fantasy. It is a Saturday afternoon of setup and a small monthly electricity bill. I run it. Plenty of people run it. The reason most of us do not is not that it is impossible, it is that the default path is so frictionless that opting out never crosses your mind.

Hold that picture, because the next two trends are what turn “why bother” into “I am glad I did.”

Trend 2: AI Makes the Data Actionable

Here is the thing that changed the math entirely: large language models.

For decades the intelligence agencies had a needle-in-a-haystack problem. They could collect everything and still process almost none of it. The NSA famously hoarded more data than it could ever read. Human analysts were the bottleneck, and the bottleneck was the only real protection most people had.

That bottleneck is gone.

LLMs can:

  • Read and summarise millions of documents in hours
  • Identify patterns across unrelated data sources
  • Build profiles of individuals from scattered fragments
  • Predict behaviour from historical patterns
  • Flag “interesting” people for a human to look at

The data that sat in cold storage for years is now searchable, analysable, actionable. Every embarrassing message you sent in 2015. Every protest you turned up to in 2020. Every late-night search you assumed nobody would ever connect back to you.

And there is a nasty twist. LLMs hallucinate. They confidently produce plausible-sounding facts that never happened. In an interrogation room or a courtroom, how exactly do you prove you didn’t do the thing an AI claims you did?

This is where the opt-out picture stops being a lifestyle choice and starts being a threat model. The less of you that sits in a queryable database, the less there is for a model to mine, misread, or invent against you.

Trend 3: The World Is Getting Less Democratic

This is the part people would rather not discuss.

According to Freedom House, 2024 marked the 18th consecutive year of global democratic decline. More people now live under authoritarian rule than at any point since the Cold War. The brief democratic expansion after 1991 is over.

Look at the map:

  • Russia: authoritarian
  • China: authoritarian
  • India: backsliding
  • Turkey: authoritarian
  • Hungary: illiberal democracy
  • Brazil: narrowly avoided it
  • United States: institutions under strain

This matters for privacy because authoritarian governments use data. Not in theory. Right now, in production. China’s social credit system. Russia’s SORM surveillance. Iran shutting off the internet during protests. None of that is dystopian fiction, it is the news.

Democracies are not exempt either. The UK’s Online Safety Bill. The EU’s proposed chat control. The renewals of FISA Section 702 in the US. Even healthy democracies keep building surveillance plumbing that a future, less healthy government will happily inherit.

The Convergence: Stable Authoritarianism

Here is the synthesis that actually keeps me up.

Historically, authoritarian regimes have been fragile. They collapse because they cannot hold control, cannot spot threats fast enough, cannot suppress dissent cleanly. The 20th century is a graveyard of failed dictatorships.

Mass collection plus AI analysis plus authoritarian governance produces something we have not seen before. Something that might be stable.

Picture a regime that:

  • Knows every relationship in society (social network analysis)
  • Predicts who might become a dissident (behavioural modelling)
  • Intervenes early, before a threat ever forms (predictive policing)
  • Personalises propaganda for each citizen (targeted messaging)
  • Identifies and removes organisers instantly (pattern recognition)

This is not speculative. China is building precisely this, and the technology travels. Dozens of countries have already bought Chinese surveillance infrastructure off the shelf.

We may be watching the birth of stable authoritarianism: regimes that no longer fall, because they finally solved the information problem that used to constrain every despot in history.

Intelligence Services Already Have Everything

If you assume this only applies to faraway autocracies, you have not been watching closely.

The Five Eyes alliance (US, UK, Canada, Australia, New Zealand) shares intelligence freely. What the NSA cannot legally collect on Americans, GCHQ collects and passes over. What GCHQ cannot collect on Brits, the NSA returns the favour on.

The legal frameworks that supposedly protect citizens get routed around all the time:

  • Parallel construction (using surveillance data while pretending you never had it)
  • Third-party doctrine (data held by a company gets no protection)
  • FISA courts (secret courts with secret readings of the law)
  • Executive orders (surveillance programmes that skip congressional oversight)

Your Western democracy holds the same data the authoritarian regimes hold. So far, the only real difference is how each chooses to use it.

But governments change. Laws change. The data stays.

The Self-Hosting Imperative

This is the whole reason I self-host everything. Not because I am up to something. Because I take the threat model seriously.

When your email is on Gmail, Google has it, and Google will hand it to any government that shows up with the right paperwork (and occasionally without). Photos on iCloud belong to Apple. Documents on OneDrive belong to Microsoft. You are a guest in all of those houses.

Self-hosting drags the data back under my own roof. My mail server, my cloud storage, my password manager, all running on hardware I can physically touch. A government can still demand access, sure. First they have to know the data exists, and then they have to come to me specifically to get it.

That gap is the difference between mass surveillance and targeted surveillance. I cannot stop the targeted kind if I ever become a target. The bulk dragnet, though, I can step out of.

What You Can Do

I am not going to tell you to delete every account and move to a cabin in the woods. That is unrealistic for almost everyone, and honestly the historical-data ship has already sailed. What is out there is out there.

You can still change the trajectory from here. This is what actually moves the needle:

Minimise new data creation:

  • Use end-to-end encrypted messaging (Signal, not WhatsApp)
  • Use a VPN for browsing (your ISP does not need a log of every site)
  • Use a privacy-respecting email provider (ProtonMail, Tutanota, or self-hosted)
  • Use a password manager (unique passwords keep a breach contained to one account)

Reduce data exposure:

  • Audit your cloud services. What genuinely needs to live there?
  • Use local-first software where you can
  • Consider self-hosting the services that matter most (my earlier posts walk through how)

Support systemic change:

  • Back the organisations fighting for privacy (EFF, ACLU, digital rights groups)
  • Vote for representatives who actually understand technology
  • Push for strong data protection laws

Accept the trade-offs:

  • Privacy usually means a bit more inconvenience
  • Self-hosting costs you time and effort
  • You cannot control what other people do with data you share

I am being honest about that last block on purpose. Sovereignty has a price, and pretending otherwise would be dishonest. The price is a few weekends and some ongoing maintenance. The thing you buy is control over what governments and corporations can trivially learn about you.

The Stakes

Here is what I want to land. Privacy is about power.

When a government or a corporation knows everything about you, they hold power over you. They can predict your behaviour. They can nudge your decisions. They can single you out. They can make an example of you to keep everyone else in line.

Privacy preserves the power balance a democratic society depends on. Citizens need parts of their lives the state cannot see, cannot steer, cannot touch. Take that away and dissent gets expensive. Make dissent expensive enough and democracy quietly stops working.

We are assembling the infrastructure for perfect totalitarianism right now. The data is here. The AI is here. The only variable left is governance, and governance can flip overnight.

So do not wait until it does. Take back control of your data. Build a little of your own infrastructure. Help the people doing the same. The window is still open. It is just narrower than it was.

Privacy in 2026 is not paranoia. It is pattern recognition.