That's what I mean with the promise. Nobody knows what they're doing on their end. The data goes over the wire, and then you need to assume they are true to their word and the data is not intercepted by anyone.