This is about control: does the user understand when the data leaves their hands and is given to another? If the user doesn't understand this, then they find t

This is about control: does the user understand when the data leaves their hands and is given to another? If the user doesn't understand this, then they find themselves unwittingly giving out their personal information, not just to legitimate actors, but also malicious ones. I think this is a pretty important thing to try and get right.