I personally do not believe all startups are trying to sell private data. But if we assume some are, how do you tell the good one from the bad? Do we not use th

I personally do not believe all startups are trying to sell private data. But if we assume some are, how do you tell the good one from the bad? Do we not use these applications then? Or are there industry standards within reach of startups that can assure data security?