> If my service runs Apache, MySQL, the source is on github, but NSA has access to all the data, how does being open-source help? I can host it on my own serve

> If my service runs Apache, MySQL, the source is on github, but NSA has access to all the data, how does being open-source help? I can host it on my own server and not share the data, or make a fork which respects user privacy and compete with you. Failing that, I can verify any claims you make about the integrity of the data - what is kept and how it is stored - and petition for appropriate change.