Serving up ads based on behavioral targeting can itself be an invasion of privacy, especially when the information used is personal.