When 'anonymous' data isn't anonymous