Why would you not do it yourself? It's literally webdev 101.
If you offload it to a 3rd party you're giving them access to your entire customer base (regardless of what they say), you're also introducing multiple points of failure and increasing your attack surface.
