That's a reasonable reason for my data to be on their servers. However, what validates that they actually do it?