Surely the most obvious business model is blackmail of the users given the sensitive information they’ve handed over?