privacy mistakes to avoid