'Privacy is at stake': what would you do if you controlled your own data?