Do you keep the data you see personally secret?, Are you keeping users’ data private?, Are your policies and processes clear to the user?