How is this even possible? I know that at Google, there was no way to access customer data directly. So this couldn't happen. That seems like a saner design