How to Make a User's Calls Private by Default