If you are concerned about data security with the vendor, you should assess their compliance with data security laws and regulations. You should also review their data security measures to make sure they are adequate.