Published on 2026-07-25
Why does this ad keep following me everywhere I go online?
You mentioned it once and now it's everywhere. Here is the real trail behind that feeling, and why it isn't your microphone.
You said the word out loud, once, to a friend. Hiking boots, a specific brand, no typing involved. By that evening they're on every site you open. The gut reaction is instant and almost universal: my phone was listening. It's a satisfying explanation, because it puts the eeriness somewhere concrete. The actual explanation is less cinematic and, in its own way, more unsettling: nothing had to listen, because you'd already left a trail wide enough to follow.
The microphone gets blamed, and keeps getting cleared
This has been tested directly, more than once. In 2018, researchers at Northeastern University and UC Santa Barbara, led by Elleen Pan and Christo Wilson, ran more than 17,260 popular Android apps through a combination of automated analysis designed to catch exactly this: any app quietly switching on the microphone and sending audio out to a server. Published in the journal Proceedings on Privacy Enhancing Technologies, the study found no such case. What it did catch instead was different and, oddly, less talked about: some apps were recording users' screens and shipping that footage to outside analytics companies without saying so. 'The screen is considered property of the app,' Wilson told Northeastern's own news team. 'The app can do whatever it wants to it.'
So the microphone theory keeps failing the same test, while a quieter kind of watching keeps passing it. That's worth sitting with. The explanation people reach for first is the dramatic one. The one that actually holds up is duller, and it's been sitting in plain sight the whole time: what you type, tap, linger on, and buy.
The trail you already left
Here's how a website you've never visited ends up showing you the exact boots you looked at last Tuesday. Most sites quietly load code from outside advertising companies, and the first time your browser talks to one of those companies, it gets handed a file called a cookie, carrying a unique ID for you specifically. According to the Electronic Frontier Foundation, which has documented this system in detail, that same tracker then recognises the ID every time you land on another site running its code, and trackers routinely swap those IDs with each other in the background, a practice called cookie syncing, so that a company you've never directly interacted with can still end up holding a fairly complete list of what you've looked at across dozens of unrelated sites.
Put plainly: you didn't say the brand name into a microphone. You searched it, clicked it, added it to a cart, or lingered on the page a beat too long, and any one of those actions is enough to hand a tracker exactly what it needs. The conversation with your friend was a coincidence of timing, not the trigger. If it feels uncanny that timing lines up so often, that's partly because we notice the hits and forget the hundreds of ordinary browsing moments that never turn into an ad at all.
Nobody needed to overhear you. You already told the internet, one click at a time, and it never forgets a click.
What follows the boots is a guess, dressed up as certainty
Behind the scenes, when a page with ad space loads, that unique ID and whatever interests have been inferred from it get shopped around in an automated auction that runs before the page finishes appearing, and whoever bids highest for your attention in that instant gets the slot. It looks personal because, in a narrow sense, it is: a profile built from your own behaviour, sold to the advertiser willing to pay most for it. It also isn't nearly as precise as it feels. The system doesn't know you want hiking boots. It knows a cluster of signals that resemble people who bought hiking boots, and it's betting you're close enough to that cluster to be worth the bid.
The mundane version is the accurate one
None of this needs a conspiracy or a hidden recording to work, and that's precisely why it's so hard to shake off: there's no single culprit to unplug, just a long trail of ordinary clicks that adds up to something that looks, from the outside, like mind reading. Clearing cookies, using tracker blocking tools, or limiting ad personalisation in your settings won't make the trail disappear entirely, but it shortens it. The boots were never a secret. You just didn't realise how many places were quietly writing it down.
Sources
- Panoptispy: Characterizing Audio and Video Exfiltration from Android Applications (Proceedings on Privacy Enhancing Technologies, 2018) (petsymposium.org)
- Are your apps spying on you? It depends (Northeastern Global News) (news.northeastern.edu)
- Behind the One-Way Mirror: The Technology of Corporate Surveillance (Electronic Frontier Foundation) (eff.org)