That was my biggest concern as well. I am sure you do not do that, it it would have been so easy to funnel my data (or metadata) to your servers.

Open-sourcing and authenticating the client code would resolve this issue for me.