At geocodio we do a couple of things to combat this. From day one we've had the ability to create and delete credentials, so It's easy to roll them in case they

At geocodio we do a couple of things to combat this. From day one we've had the ability to create and delete credentials, so It's easy to roll them in case they got accidentally pushed to a public GitHub repository or something like that. The other thing is just having a common-sense approach. Humans are prone to mistakes, and we are humans too. If you accidentally geocoded 20 million wrong addresses overnight that you didn't mean to, we're just going to waive the usage. Of course this only scales to a certain point, but in most cases it's clear when something like this happens by mistake.