Data Privacy & Portability: Who owns what? Who can see what?