I like this flowchart but honestly most third party data handling solutions are just asking for a major breach: stoking vulnerable people over the coals.