Who should hold the keys to our data?