Basically, we have an oauth-like mechanism that sites can integrate. The user gets to control, from their side, what data they whitelist and share. Whatever the

Basically, we have an oauth-like mechanism that sites can integrate. The user gets to control, from their side, what data they whitelist and share. Whatever they don't, they don't get to have access to. You're right, though: this is a steep hill to climb.