keep data private if possible