Ask HN: How do you prevent PII from reaching third-party services?