Some services don't have the desire (or need!) to send out generic service notifications. For ToS changes, it's often enough to display them to the user when t

Some services don't have the desire (or need!) to send out generic service notifications. For ToS changes, it's often enough to display them to the user when they first log in after the change. That's how many mobiel apps handle it already. The security notification thing could be an issue though. Doesn't seem to be necessary per the GDPA but it's probably a good idea to communicate security breaches.