I have neither time, resources nor know-how to like go all out on data privacy. But I try doing things like using Proton for Mail, browsing with DuckDuckGo or Ecosia, messaging on Signal instead of WhatsApp, etc.
But I’m having a hard time responding to people who say “why do you do that, it’s completely pointless since companies like Google have all of our data anyways unless we go all out, and nobody has time for all the effort that takes”.
Tell them about surveillance pricing. It’s a good example because the information “already out there” is used to influence how much the stuff they buy costs. Another example would be unsecure home security/doorbell cameras that anyone on the internet can watch (if you know where to find them). Their camera feeds are “already out there”, so ask them if that’s ok.