Hi.
While I like the general idea, I do have mixed feelings storing so much valuable data online, on servers of a company I don't know, that operates in the US.
While I like the general idea, I do have mixed feelings storing so much valuable data online, on servers of a company I don't know, that operates in the US.
Do your feelings change at all with knowing that the data is completely encrypted at rest and inaccessible by me/the company even though I have access to the database?
1- give access to one of you trusted contact accounts
2- disable sending notifications to the account holders email
3- 3letter agency clicks on request data
4- data gets released ( as it will not get denied if the account holder does not receive a notification)
1 - Even with access to the trusted contact's account a passphrase/access key (specific to the main account and not stored by the service) is required
2 - Interesting scenario but still requires the above-mentioned access key
3 - Same as above two points even after being approved
4 - Won't get released without the key
I understand that your service is encrypting the data before saving it (vs that happening completely on the client and only encrypted data being sent to you), so there's nothing stopping you from logging it to a plain text file (even accidentally). Given that these passwords will likely hold the keys to that person's identity, that's a huge amount of trust that they need to have in you, your technical abilities and future decisions.
Overall that's one uphill challenge I've seen emerge as I've chatted with folks about the product: inspiring trust.
do i provide the trusted contact the access key or how does that work?
When is it generated?
What if add a new trusted contact or remove one how does that change things?
What’s funny is earlier versions of the landing page had way more detail for what you’re asking about and I got chided for it during user testing reviews haha.
Every user generates their own key (which can make it more friendly) and would need to provide it to their contacts on their own. It’s required to be set before you add any data.
Modifying users doesn’t change anything for me. Any new contact would need to be sent the same key or you can change it! Old users wouldn’t be able to request access regardless of knowing your (maybe old) key.