It turns out people are better at protecting their privacy than companies would like