How does privacy impact the design of recommender systems?