Putting the privacy paradox to the test