Not a list of people, but here's the checklist those people usually start with, so you know what to look for:

1. Relays see your IP. Every relay you connect to logs it. Use Tor (Amethyst has it built in) or at least a VPN.
2. Old DMs (NIP-04, kind 4) hide the text but leak who talks to whom and when. Use clients with NIP-17 gift-wrapped DMs.
3. Your follow list (kind 3) is public. It's a map of your social graph.
4. Zap receipts (kind 9735) are public and link sender, receiver and amount. Some clients offer private or anonymous zaps.
5. Photos: strip EXIF/GPS before uploading. Don't assume your client or the Blossom server does it for you.
6. Separate identity = separate key, separate relays, a different avatar and writing style, and never cross-follow.

Hashtags worth following: #privacy #tor #nostrdev