You can put as many technical barriers in place as you want, eventually you do have to trust your employees. Sure, you could store everything client-side (or ha

You can put as many technical barriers in place as you want, eventually you do have to trust your employees. Sure, you could store everything client-side (or have a local encryption key), but most people don't actually want that - they want to be able to access their history from any computer they're at, they want the ability to forget/reset their password, etc. and so you're back at the company holding the secrets, and the employees need to be trusted. Of course you'd hope for access control/encryption/etc. as well as it being prohibited, but this is standard across just about any industry. Somebody has access, and they're trusted not to use it.