I still go with the assumption that everything that is sitting somewhere in some server will be leaked. Having unnecessary data is the problem