Heavy Hitters and the Structure of Local Privacy