How is my user data being handled?