I think 'don't give your data to assholes' is a pretty good policy, regardless of whether it is personal or business.