Dear HTTP service, how can I trust you not to break my heart?

When you send your most intimate data to an AI-platform, how do you know it&rsquo;s not being shared with third parties? Or, how do you know it won&rsquo;t be used to train the next generation of models? More generally, how do you know that any web service will fulfill its social, contractual and legal obligations? From the outside you might be able to see that an endpoint is using SSL, but…