Cool, put some actual rules in place. I recommend a law that states that customers own their data and it cannot be stored or transferred without an explicit agreement to do so. And no, burying something dozens of pages deep into a TOS doesn’t count. And companies should have a very clear custodial obligation to safeguard any data they store, similar to how banks have guarantees against fraud.