My usual rebuttal to "I have nothing to hide":

http://martinfowler.com/articles/bothersome-privacy.html