What it costs¶
The costs of extraction are mostly not felt as costs. They arrive as a slightly worse price, an application that quietly fails, an advert that knows too much, a caution that hardens into a habit. Each is small, private, and hard to trace back to its cause, which is part of what keeps the trade comfortable for everyone but the person paying. And the costs do not land evenly.
Priced by who you are¶
The profile lets one thing cost different people different amounts, and lets some people never see the offer at all. This is not a leak; it is a quiet sorting into better and worse terms. Because each person sees only their own price, the sorting is nearly impossible to notice from the inside, and there is no shelf label to compare against. What is sold as a personal offer is often just a personal price.
Judged before you arrive¶
A risk score does not wait for a person to speak. It has already settled the application by the time they make it, and what lands is only the outcome. A wrong inference costs as much as a right one, usually more, because the guess that sank them is not visible and carries no door marked appeal. The decision arrives as a flat no with no reason attached, and a verdict a person cannot read is a verdict they cannot contest.
The sensitive made legible¶
A trait a person never disclosed can end up known to parties they never told, and sometimes to people they were not ready to tell. The Grindr fine turned on the fact of being on the app, an inference about orientation; Flo passed a logged period to advertisers; the hospital pixel reported medical appointments to a social network. The range of harm runs from an advert that guesses a pregnancy before the family knows to an outing that is dangerous where the person lives. The disclosure is the same mechanism each time; only the stakes change.
Watched into caution¶
People who assume they are being read begin to edit themselves: what they search about a health worry, which article they open, what they are willing to buy under their own name. The surveillance model describes this narrowing where the watcher is the state and the fear is prosecution. The commercial version is quieter and has no courtroom behind it, only a sense of being profiled, yet it shapes the same small daily retreats. A person need not be doing anything wrong to start behaving as though they might be.
Consent for the wrong thing¶
The deepest cost is structural. Consent is asked for the cookie while the real transfer, the profile assembled, matched, and sold onward, is never the thing on the table. “Manage preferences” governs a banner, not a dossier, and once data has moved and been combined there is no button that pulls it back. A person can agree to everything they are shown and still never have been asked about what actually happens. The frame of choice is offered precisely where choice changes least.
The weight falls unevenly¶
For someone comfortable, extraction is mostly an irritation: a creepy advert, a nagging sense of being known. The costs turn real further down. A higher price is a shrug for one person and an unaffordable door for another. A risk score is a formality for the applicant who clears it and a wall for the one it quietly excludes from credit or a home. An inferred trait is an awkward advert for most and a genuine danger for someone whose safety depends on it staying private. The same machinery, pointed at everyone, presses hardest on those with the least room to absorb it. For someone whose right to remain is uncertain, the trail that sells an advert can help decide whether they are allowed to stay.
Last reviewed: 2026-07-17.