Edward Snowden, the man who revealed what happens to our data

By the Archibou Team

In 2013, a former NSA consultant handed journalists an unprecedented set of classified documents. What they revealed permanently changed our relationship with technology: the data of citizens around the world — their messages, calls, searches and files — was being collected on a massive and systematic scale by US intelligence services, most often with the active cooperation of major platforms.

Edward Snowden did not merely expose a scandal. He publicly raised a question that concerns every one of us: what really happens to our data?

Who is Edward Snowden?

Snowden is not a hacker. He is a systems engineer, recruited by the CIA and later working as a consultant for the NSA. After years spent managing the very infrastructure that collected the data, he decided that the abuses he observed could no longer be kept silent. In 2013, he gathered tens of thousands of documents and handed them to journalists.

The revelations, published notably by The Guardian and Le Monde, described in detail programmes whose existence had been feared but never proven: mass collection of content and metadata, interception of international communications, and forced or coerced cooperation from technology companies. The story, marked by the PRISM programme, revealed that surveillance is not a tool reserved for targeted investigations, but a general mechanism that affects ordinary citizens, including outside the United States.

Charged with espionage in the United States and unable to return without being arrested, Edward Snowden has lived in Russia ever since. He has become one of the central figures in the debate about privacy and mass surveillance.

What this reveals about your data

Beyond the technical case, the Snowden affair sheds light on structural realities that concern every user of online services.

1. Content analysis is the rule, not the exception. To function, many services automatically examine what you store on them: filtering, indexing, image recognition, training of artificial-intelligence tools. What is stored on an online service can be read, processed and classified, often according to principles that are barely transparent.

2. Jurisdiction matters more than geography. An American company, even when its servers are located in Europe, remains subject to US law, notably the CLOUD Act. Your data can therefore be requested by US authorities regardless of where it is physically stored. This is the mechanism we described in our article about data centers.

3. Consent has its limits. When you do not know what a service does with your data, "accepting the terms" is no longer an informed choice. Mass collection makes surveillance indifferent to identity: the question is not whether you are individually targeted.

What this changes for you

You do not need to be a whistle-blower to think about where your data ends up. Family photos, contracts, medical records, administrative documents: all these files, stored on an online service, fall under the same framework as soon as they pass through a provider that analyses them or hosts them outside your jurisdiction.

Four simple criteria help you keep control:

• Who can read your files? The presence of automatic analysis, or its absence.
• Where are they really? And above all, which jurisdictions apply, even when the file is "in Europe".
• Who owns them? Portability and open formats guarantee a way out.
• What does the contract say? The terms of service detail what the provider may do with your data.

Archibou's approach follows this logic: data hosted in France, no scanning of your files, no AI training, no resale of your data. Your memories and sensitive documents remain under your control and under a jurisdiction that protects you.

Edward Snowden's contribution was not to prove that surveillance existed — many suspected it. It was to make that reality impossible to ignore. Since then, privacy has become an individual and concrete question.

What are your data becoming today?

Want to learn more? Archibou opens on October 1, 2026. Sign up to be notified.