Avoiding 'profiling by proxy'