The Thin Line Between Personalization and Privacy