> Can't it also happen because you view a document on your Android device? There's a difference between a breach which would need to happen on your phone (wher

> Can't it also happen because you view a document on your Android device? There's a difference between a breach which would need to happen on your phone (where you may be able to detect it) and a breach which can happen remotely, in such a manner that you are never aware. A sufficiently-paranoid organisation could store a binary of every system update its devices receive, and in case of a suspected breach examine them forensically; nothing they can do remotely can determine if someone silently copied data. > The latter... well I guess you'll never know until someone catches them and sues their pants off. So demand a system in which not knowing is impossible! > The next question is possibly "how do we use/provide cloud based services while respecting users' privacy?" My answer is that plaintext must only be visible on the customers' devices: providers should only be able to see chunks of data moving around, not the content of those chunks. They would make their money by providing price, reliability and services like 'send this chunk of data to that person.'