Service working against database: need to parameterize db access; encapsulate db access (kinda violating SRP currently)