Let us take the objection seriously, because it deserves a real answer, not a lecture.

“No one cares what I’m doing” is the wrong picture

When you picture surveillance, you picture a person. A bored agent with headphones, listening in, deciding your life is too dull to bother with. If that were how it worked, you would be right to shrug.

That is not how it works. Your free email account is scanned by software that never tires, applied across a billion inboxes at once, building a profile of you: what you buy, who you talk to, when you travel, what you are worried about, what you are about to spend money on. Not because anyone finds you interesting, but because the profile is the product. You are not the customer of a free email service. You are the inventory. The fact that it costs you nothing is the tell.

So the honest version of the question is not “is a person interested in me.” It is “do I want a permanent, searchable, sellable record of my life built and owned by an advertising company.” Put that way, “nothing to hide” starts to feel like the wrong frame. Privacy was never about hiding wrongdoing. You close the bathroom door, you put curtains on your windows, you seal an envelope. Not because you are doing something shameful, but because some things are simply nobody else’s business. That is the default state of a free person, not a confession.

“But doesn’t Gmail not do this anymore?”

Fair challenge, and the honest answer matters, because if we overstate it you have every right to stop trusting the rest. Here is the accurate version.

Gmail officially stopped scanning your email content to target ads in 2017. So the popular line “Google reads your mail to sell you ads” is no longer literally true, and we are not going to pretend it is. But read the asterisk. Google still scans your Gmail for features, the smart replies, the package tracking, the calendar events it pulls out automatically, so your mail is still machine-read every day. And it still builds one of the most detailed advertising profiles on earth from everything else you do in its world: Search, YouTube, Maps, Chrome, Android. The inbox is no longer the ingredient, but you are still very much the product, and the ads still land in front of you.

There is also a side door. Third-party apps you connect to your inbox can read your mail. Reporters found in 2018 that employees at app companies were literally reading users’ Gmail messages, with permission buried in a consent screen nobody reads. Every time you grant some app access to your email, that risk is live.

And one major provider never stopped. Yahoo Mail, along with AOL, was caught still scanning email content, including shopping receipts and travel confirmations, to build ad profiles, at a point when its rivals had already abandoned the practice. It has never announced that it stopped. So “email is still read for ads” is not a thing of the past. It is just that the provider most people picture is not the one still doing it.

So the honest summary is this: Google says it stopped scanning Gmail for ads in 2017. Yahoo never did. And either way, with a free email account, you are still the product. Which brings us to the part that actually bites.

It is not about reading your mail. It is about steering you.

“They read it to advertise to me” sounds harmless until you say plainly what advertising is. It is the business of changing what you do. What you buy, what you believe, how you vote, and when. A system that knows you are stressed, short on money, recently bereaved, or up at 2am worrying can time its pitch for the exact moment your judgment is weakest. That is not a service. That is manipulation, sold by the click, and your inbox is one of its richest sources.

And these profiles are not as harmless as a few off-target ads. Here is what they have actually done.

Real things that have actually happened

A store knew a teenager was pregnant before her father did. In a now-famous 2012 case, the retailer Target analyzed shopping patterns so well it could predict pregnancy from a shift in what someone bought. It started mailing baby coupons to a high-school girl. Her father complained to the store, then later had to apologize, because Target knew before he did. No email required, just the data exhaust of an ordinary life, read by a machine that drew a conclusion nobody had agreed to share.

“Anonymous” data is not anonymous. In 2021, a senior US Catholic official was forced to resign after a newsletter bought commercially available location data, the kind quietly collected by ordinary phone apps, and used it to trace his movements to a specific person. The data was sold as anonymized. It took almost no effort to un-anonymize it. The lesson is not about him. It is that “don’t worry, it’s anonymized” is a sentence with no weight behind it.

Your private messages can become evidence. In 2022, a Nebraska mother and daughter were charged in an abortion case after Facebook, served with a warrant, handed police their private messages, which then became the centerpiece of the prosecution. Meta has pointed out that the warrant did not even mention abortion. Set aside the specifics of that case. The lesson underneath it is simple and applies to everyone: a conversation they believed was just between the two of them was sitting on a company’s server, fully readable, one legal request away from a courtroom. Whatever you write in a free messaging service, you are trusting the company that holds it to decide what happens to it next.

Your data is bought by the people you would least want to have it. Data brokers, companies whose entire business is buying and reselling your information, have sold Americans’ location and personal data to police departments, the IRS, and immigration enforcement, often without a warrant, because buying it is easier than asking a judge. The free market in your life does not check who the buyer is.

None of these people had “something to hide” in the guilty sense. They had ordinary lives that a system turned into a liability. That is the real risk. Not that you get caught doing wrong, but that you do not get to decide today what will be used against you tomorrow.

If you run an organization, it was never only your privacy to give away

Here is the part that turns this from a personal choice into a professional one. When you run your business through a free, ad-scanning email account, you are not just exposing yourself. You are exposing everyone who trusted you with their information. Your clients. Your patients. Your customers. The person who emailed you something sensitive because they believed it was between the two of you.

Their data was never yours to hand to an advertising company. You would not run your books through a competitor’s office or hold your client meetings in their lobby. Routing your mail through a company that monetizes its contents is the same move, just invisible. “I have nothing to hide” does not cover them. They did not get a vote.

The argument that matters most: you protect the people who are actually targeted

This is the one we care about at Desk Ready, and it is the one almost nobody makes.

Even if you genuinely have nothing to fear, plenty of people do. The domestic-violence survivor whose location must stay secret. The immigrant family. The journalist, the organizer, the person seeking reproductive care in a state that has criminalized it, the LGBTQ kid in the wrong town. For them, privacy is not a preference. It is safety, sometimes physical safety.

Now here is the thing that connects you to them. Privacy works like herd immunity. If the only people who use private, encrypted tools are the ones with something to fear, then using those tools becomes a flag all by itself. Reaching for protection marks you as a target. But when ordinary people with “nothing to hide” use private tools as a matter of course, the targeted disappear into the crowd. Your normal, boring, encrypted email is camouflage for someone who genuinely needs it. Your participation is the cover that keeps them safe.

There is a more direct version too. Your address book is not only yours. When you hand your contacts to a free email provider, you hand over everyone in them: their addresses, when they talk to you, where they are. Your activist friend or undocumented relative may never have used Gmail in their life, and still end up profiled inside it, because you uploaded them. Your privacy choices spill onto the people around you whether they consented or not.

So if you are someone who wants to stand with people who are targeted, and we know many of you are, this is one of the most concrete ways to actually do it. Not a slogan, not a repost. You change your tools, you raise the baseline, and you make the crowd they hide in a little bigger and a little safer.

“Nothing to hide” is not the same as “nothing to protect”

That is the whole article in one line. You can have nothing to hide and still have a great deal to protect: your clients’ trust, your own decisions made free of manipulation, your record kept out of hands you will never get to vet, and the safety of people who are counting on the rest of us to be private too.

The good news is that doing something about it is not exotic anymore. Moving to an email provider that does not read your mail and is not in the advertising business, like Proton, is the single highest-value switch a small org can make, and it is far less painful than people fear. We made that move ourselves before we ever recommended it, and we wrote up how it went in a companion piece.

You do not have to do all of it at once, and you do not have to do it alone. But “no one cares what I’m doing” should not be the reason you skip it. Plenty of systems care very much. The question is whether you would rather they cared on your terms, or theirs.