The people around you: the observer nobody models

Every other section of this catalogue describes a system, and systems are at least predictable. This section is about people, who are not, and who are the most common reason a private thing stops being private.

A router keeps a record because it was built to keep a record. A postal operator scans a barcode because the scan is the job. You can reason about those observers because they behave the same way on a Tuesday as on a Sunday. A person who glanced at your screen last week is not like that. They kept an impression rather than a record, they will recall it at a moment nobody can predict, and they may repeat it to somebody you have never met for reasons that have nothing to do with you.

None of that is an argument for distrusting the people in your life. It describes how memory and conversation work, and it applies to you as much as to anyone else. The point of this section is not to make you watchful of your friends. It is to make you accurate about one number: how many people currently hold a given fact.

Five ways a person differs from a system

They infer instead of recording. A system stores the field it was handed. A person sees an unfamiliar browser window, notices that you closed it quickly, and builds a story out of the gap. The story is often wrong in every detail and still close on the one that matters.
They remember selectively. Nobody stores the whole evening. People store the odd bit, and the odd bit is usually the part you were hoping was unremarkable.
They talk. Not out of malice. Talking is what people do with anything mildly interesting, and no system-level observer has an equivalent behaviour. A log file does not mention you over dinner.
Their loyalties are their own, and loyalties move. Someone with no reason to repeat a thing today may have a reason in two years, and that reason will be about their life rather than about yours.
They can be asked. A system answers when it is compelled to. A person can be asked casually, by anyone, at any time, and may answer without noticing a question was asked.

What a person near you actually holds

Readers get this wrong in both directions. Some assume a housemate who saw a screen for two seconds now knows everything. They almost never do. What survives two seconds of glancing is a colour, a layout, a word in a large font, at most a sense that the thing was not a normal website. That is a mood, not a record.

Others assume the opposite, that because nothing was said out loud nothing was communicated. That is also wrong. People read behaviour well. Waiting for the flat to empty, taking the laptop into another room, checking the front door at a particular time of week: none of those are secrets, and all of them are visible. Somebody who notices a pattern has learned something real, even though no fact was ever stated.

The honest summary is that people near you hold impressions with fuzzy content and long lifetimes, whereas systems hold precise content with a defined retention. The two failure modes are different, and this catalogue keeps them apart on purpose.

The arithmetic, not the suspicion

A fact held by one person is a stable thing. A fact held by two people is a fact in circulation, because the second person now has their own reasons to mention it, their own judgement about who is safe to mention it to, and their own memory of what it was. Nothing dishonest has to happen for the number to keep climbing. The card on telling one person works through that arithmetic properly.

Framing it as arithmetic rather than as trust is the whole trick. Trust is a question about a person, and it invites you to think badly of somebody. Arithmetic is a question about a count, and it invites you to be honest with yourself. The person you told may be entirely reliable and the count still moved.

What this section will not do

There is nothing here about managing, steering or misleading anybody, and no scripts for what to say to a partner, an employer or a police officer. Those are not privacy questions. They are questions about your relationships and your legal position, and a catalogue of observers is the wrong place to answer them.

What is here instead is a set of plain descriptions: this act happened, these people were positioned to notice it, this is what noticing it gives them, and this is the large amount it does not.

The six cards in this section

They run roughly from the deliberate to the accidental. The first is a thing you chose to do. The last is a phone left face up on a table.

People near youTelling one personThe person you told · Anyone they later tellThe arithmetic of disclosure: what changes when a fact stops being held by exactly one person.5 things reduce this People near youLending the machineWhoever borrowed it · Whoever is in the roomSomeone borrows your laptop or phone to look something up. What surfaces without either of you intending it.5 things reduce this People near youA shared addressA housemate · A front desk · Whoever collects the postHousemates, family, a concierge or a workplace post room. Anyone who can accept a parcel can notice one.5 things reduce this People near youThe screen in a shared roomWhoever is in the room · Anyone on the call · Someone passing behind youShoulders, reflections, doorways and screen sharing. Plain geometry, and why most glances retain nothing.5 things reduce this People near youAsking for helpThe person helping · Everyone else reading · Whoever runs the forumThe most self-inflicted card in the section. A helper needs context, and context is exactly the sensitive part.6 things reduce this People near youPaper and an unlocked phoneWhoever is in the room · Anyone who picks up the phone · Whoever tidies upWhere the small written things live: a scrap of paper, a notes app, a message thread, a photo in a camera roll.6 things reduce this

The natural companions are your own device, where most of the artifacts in these cards actually live, and the postal system, where a shared address stops being a people question. The seven observers page puts all of them side by side, and the catalogue lists every card.

Questions that come up

Does this section think my family are a threat?

No. Family, friends and housemates are observers, which is a statement about position rather than intent. Your neighbour is an observer of your front door. That is geometry, not accusation.

Why separate people from the device section?

Because the mechanisms differ. A device leaks by storing. A person leaks by remembering and speaking. A cleared cache does nothing about a conversation, and a careful conversation does nothing about a file on the disk.

Is there a number of people that is safe?

This site does not publish thresholds of that kind, because the number is not the only variable and pretending otherwise would be false precision. What the section does say is that the step from one to two is qualitative.