"I have nothing to hide" only makes sense if privacy and disclosure are treated as a binary. In reality, both exist on a spectrum: privacy is controlled disclosure, shaped by what is shared, with whom, at what level of detail, and under what power asymmetry.

Large surveillance systems inevitably build baselines. They don't just detect crimes; they detect patterns and anomalies relative to whatever becomes "normal".

The problem with "nothing to hide" is that it defaults to maximal disclosure. Data is persistent, aggregatable, and reinterpretable as norms and regimes change. The data doesn't.

This isn't purely individual. Your disclosures can expose others through contact graphs and inference, regardless of intent. And it doesn't matter whether the collector is the state or a company; aggregation and reuse work the same way.