This is a great question. I have to admit that the only effort I've taken thus far is to minimize reliance of external parties. For example, on my utility site,

This is a great question. I have to admit that the only effort I've taken thus far is to minimize reliance of external parties. For example, on my utility site, I don't use google/fb auth but have used Persona and recently rolled my own auth ... and I keep very minimal summary analytics only. Somehow I feel that the burden of starting a website today is kind of crazy - analytics, comments (and the implied spam filtering), social media sharing integration, onsite feedback, social logins, T&C, privacy policies, cookie legalities, DNT, ... all apart from the content we actually want to put there, even if only as individuals.