I have more practical concerns. I might "trust" the company not to abuse or sell my data - but do I trust that they are actually competent enough to secure it?

I have more practical concerns. I might "trust" the company not to abuse or sell my data - but do I trust that they are actually competent enough to secure it? It is abuse by hackers which gain access to the data that I am worried about.