Participatory Privacy in Urban Sensing - Meru Sandbox