Any data shared with hosted services really needs to be seen as postcards ie open for any agency to read.