It'd be interesting if you basically made it illegal to both process and store user-data. If you want to process a user's information you need to go through th

It'd be interesting if you basically made it illegal to both process and store user-data. If you want to process a user's information you need to go through that user's storage API and then you need to persist your data back through that API. Since everything is co-located in the cloud I don't think latency would be a huge deal. Users would get a choice of storage vendors - total visibility into who and what is doing the reading/writing and can delete/revoke access at any time.