Personalization Should Feel Like Attention, Not Surveillance

The last email Barnes & Noble sent me opened with two words: "Hi Member." I have bought books from that company for thirty years, and somewhere in the databases of a brand I genuinely like, I am not Emma. I am not even a vague attempt at a customer. I am a membership status. It is a small, faintly funny moment, the kind you scroll past without thinking — but it is also a little deflating, because I would not call that a relationship, and I suspect most brands that do the same thing would.

That email is one half of a strange problem. The other half is its opposite, and it is arguably worse. Last spring a stranger opened a message to me by quoting the first line of my LinkedIn profile back at me, as though reading a headline I wrote for myself proved that anyone had read anything. It was meant to flatter. It landed as the opposite — a thin layer of fake attention stretched over the fact that I was, to this person, a field and a company name. Someone had scraped a sentence and called it care. I felt seen the way you feel seen by a panopticon: visible, not known.

Here is the argument I keep coming back to, in every conversation about outreach I have in my own work: dropping a first name into a subject line is the bare minimum of human contact, and most people can smell that it is bare minimum from the first word. But the answer to a lazy tag is not a more invasive tag.

Personalization that exists to prove we have data on you is not personalization — it is surveillance with a greeting.

Real personalization is using what you know to make the next thing more useful, more relevant, or more timely for that person, so the effort arrives as value rather than as a performance of attention.

The difference matters because it decides who the message is actually for. And most automated outreach, when you look at it honestly, is not for the person receiving it. It is for the sender, who needs to feel — and to demonstrate — that they did the work.

Let me build the two sides of this, because they live in the same inbox and feel nothing alike.

Start with the creepy version, because it is the one I get asked about most. It is outreach that references something scraped, something public, something that has nothing to do with any problem I actually have. The LinkedIn first-line opener is the cleanest example, and it is worth pulling apart beyond the one in my inbox. You will have seen the variants:

• the ad that follows you with the exact item you only mentioned out loud in the kitchen

• the message that congratulates you on an anniversary or a promotion it has no business knowing about

• the email that references a conference you once attended because it was somewhere in a bought list

I have seen all three variants in my own inbox this year, and they share a single, telltale flaw. In every one of them the personal detail does the same job — it serves the sender's goal of looking attentive. And in every one of them the recipient is left with the same two questions: how did they know, and why does it matter to me?

The second question is the one that unmasks the whole thing. Because the honest answer is almost always that it does not matter to me at all. It mattered to the sender, who needed a hook, and so the scraped fact became a hook regardless of whether it had any bearing on my life. That is the tell. A detail is not personal because it is true about you. It is personal because using it makes your life easier in some small way. The LinkedIn headline is true about me, and it is entirely useless to me — it was written to describe myself to a professional stranger, not to be thrown back at me as a pickup line. When the only point of knowing is to prove you know, the knowing becomes a small act of trespass.

Now the valuable version, which is the version I actually believe in. It is the follow-up that exists because of something the person did with the brand, in the open, on purpose.

• A customer leaves a store and gets a thank-you that includes something real to come back for, built around what they actually bought and looked at.

• Someone abandons a cart and gets a note and a short video that speak to that exact cart — the item, the size, the question that probably stopped them.

• A product someone has been waiting on finally comes back in stock and they hear about it first, because they raised their hand and said they wanted it.

Each of these lands differently because the recipient handed over the detail themselves, in the open, on purpose. That is the entire difference.

I think about this every day at Found&Chosen, and it is the thinking behind how SDRCloud is built. SDRCloud runs outreach — but the point of the platform is not to generate more touches. It is to make the touches that exist worth the reader's ten seconds. The outreach that works on SDRCloud, and the outreach I would defend to anyone, is the kind rooted in something the recipient actively did: opened the thing, asked the question, downloaded the guide, abandoned the purchase. The platform is designed around behavioral signals, not merge fields. A merge field — the first name, the company name, the title — is a fact about you that a database owns. A behavior is a fact you gave, and using it feels different in the body. When a brand follows up on something I did, I think: of course. When a brand follows up on something it dug up about me, I think: why do you have that?

There is a one-question test I run on every message before it goes out, and it is simple enough to carry around. Imagine the person could see exactly how you knew what you know — the trail, the source, the moment they handed it over.

Would it feel helpful, or would it feel invasive?

If the honest answer is that they would be unsettled, the personalization is for you. If the honest answer is that they would say of course, that makes sense, it is for them. There is no framework name for it, no acronym. It is just a question I ask before anything of mine gets sent, and it catches almost everything lazy before it reaches a real person's screen.

The reason I trust it is that people are good at this. They have spent years being marketed to by machines, and they have developed a reliable instinct for the difference between a message built from what they did and a message built from what someone found. The creepy email feels creepy in the chest, not in the head — you cannot always explain why it is wrong, but you know it is wrong. The valuable one feels obvious, even a little obvious in the good way: of course they knew I looked at that, I looked at it in front of them.

Now, the practical reason this is not just a matter of taste. People have been trained, by years of automated outreach, to discount anything that looks personalized on sight. The Gartner survey put a number on it that I have thought about ever since: 48% of customers perceived personalized digital communications as irrelevant, creepy, or both (Gartner survey via LinkedIn). Nearly half. That is the audience for most of the outreach being sent right now — an audience primed to read any touch of personalization as either noise or surveillance before they even open it.

Which means fake personalization now costs more than no personalization at all. When you use a scraped detail as a greeting, you are not just failing to impress; you are actively confirming the recipient's suspicion that this is a machine pretending to be a person, and you are burning the goodwill it would have taken a genuine, useful message to earn. Real personalization is harder to build. It has to wait for the person to do something, then read the something correctly, then respond in a way that saves them effort. That difficulty is exactly why it still stands out — because almost nobody is doing it. The bar has fallen so low that simply being relevant and honest reads as remarkable.

This is the principle I hold the work I am part of to. It is why SDRCloud is built the way it is, around what a person actually does rather than what a list says about them. And it is the same principle that runs through the content written here on Voce. The writing that works on Voce, the pieces that actually get read and kept, is specific in the way that real personalization is specific — it comes from genuinely knowing the audience and the problem they are living with, not from a field in a database. The writer has to know the reader well enough to be useful to them, the same way a brand has to know a customer well enough to save them a step. Specificity that is earned by attention. That is the whole game.

I want to come back to the Barnes & Noble email, because it is the truest example I have of what I am trying to say, and it deserves the light touch it asked for when I opened this piece. "Hi Member" is not a failure of technology. The company clearly has my name, my history, my years of purchases — all of it sits right there in the system, a few fields away from the greeting. The email is a failure of imagination, or maybe just of nerve: they had everything they needed to be useful to me and chose, instead, to be safe. They called me by my status because it was the field that could not be wrong.

But here is the thing I keep circling back to. A name in a subject line was never the point. The point is whether the message would have been worth sending if the name were removed. Would the Barnes & Noble email have been worth sending to me as plain, nameless prose, with nothing but its actual content to carry it? Would the LinkedIn opener survive having the scraped headline stripped out? Almost never, on both counts, and that is the diagnosis. When a message needs a personal tag to justify its existence, the tag is not personalization — it is a crutch holding up a message that should not have been sent in the first place. The best personalization is invisible, because it is indistinguishable from just paying attention.