Perhaps one solution could be to keep your personal data encrypted but then if you need an online service you'll need to somehow let the services access it. Th

Perhaps one solution could be to keep your personal data encrypted but then if you need an online service you'll need to somehow let the services access it. That's the part where it gets tricky. Either the code working on your data is sandboxed from the outside world which sounds impractical. What if needs to talk to other backends. Alternatively the operating system ACL framework is super granular so you can give the service the minimum amount of data it needs. Or another solution could be a way to easily see which entities/apps have access to your data and the time they accessed them. Like some sort of an audit log with accessible UI. A non-profit agency is nice and all but doesn't give much guarantee.