Personalization vs privacy: Where do we draw the line?