Privacy in a Can