> However, the fact that this hand labeling is possible indicates in itself that the issue isn't a pure privacy violation. They can use it on profiles where th

> However, the fact that this hand labeling is possible indicates in itself that the issue isn't a pure privacy violation. They can use it on profiles where that wouldn't've been possible before, and which do not have the obvious tells like "By the way, I live in Melbourne, Australia". Once an 'easy' profile has been labeled, then the model will be trained to learn all the features in that profile which correlate with living in Melbourne, including the ones no human had ever noticed before, and which will be present in other Melbourne profiles. (You could, and should, also remove the obvious tells from the training data after you have constructed the label, to force it to discover subtler features beyond the ones your human labelers used.) This lets you bootstrap your classifier to extract information no human could have before. That would seem to be a 'pure privacy violation' by your definition.