Your privacy shouldn't be a corporate decision