Analyzing Sensitive Data with Local Differential Privacy