“How can services learn aggregate statistics about a population without revealing information about the users?” This question can be answered from a local differential privacy perspective. We wrote an article about local differential privacy and Google’s recent implementation called RAPPOR.
You can read the full article here.