Putting Strong Emphasis on Quiet 

So are we. At the heart of what we do, we're our own users first as well, and treat your data the same way we'd want our own to be treated. We follow security best practices and consistently keep our systems up-to-date to deal with the latest threats. But all of that just does what we consider the bare minimum and doesn't prevent abuse or misuse of data. Because of our focus on this topic, we have a few core philosophies that we hold regarding data:

Always anonymous. We're a data-based product and company, and the value we provide to users is from that. But not everything provides you value—namely, personally-identifying information (PII). We always fully encrypt our databases, and go above and beyond in fully anonymizing our users, and studiously avoiding collecting PII unless necessary. This is because we realize something a lot of other companies don't. Collecting everything "just in case" rarely ever pays off... but always has a big cost in risk to your privacy. We don't play those games with your data.

Explicit, enthusiastic, informed consent. Related to understanding data is both value but also liability, we don't secretly trawl your entire life in the background. We strive in our design to always be clear what is being collected and, if not obvious, why. Our mindset is if we went through each piece of data we collect, the answer should be an enthusiastic answer yes to what is provided. In fact, we go so far as to build in explicitness even in our UI—your vibrator never sync or secretly sends anything. You MUST explicitly hit the sync button on the app for it to ever communicate. We're not fans of cloak and dagger, not with our intimate products.

Defense-in-depth, minimize attack surface. We're not an old traditional company trying to adapt to the new digital world. Our team are from some of the top technology companies in the world, and we understand the realities of security in this age of cyber threats. We build our systems like a medieval castle—layers upon layers. Although we don't expect it to happen, if our public endpoints are breached, they don't actually hold data. Even if our private networks are breached, our databases are encrypted, and hence gibberish without our private keys. Even if our databases are decrypted, all user data is one-way hashed, so it can't be backed out without a complete user list. But even if OUR servers are hacked, our authentication servers with user lists are NOT kept with us—they at one of the top authentication and security providers in the world. So the hackers now need to go breach them. And so on and so forth. We know being tested in security isn't matter of if, but when, and treat your data as we do our own.