Privacy-Preserving Sensing