How We Protect Your Data
Reward My Data · A public benefit community centered around data privacy and economic inclusion
Why It Matters
Your Data Has Probably Already Leaked.
Some of the biggest names in banking, phones and health care have been breached. Every company that quietly holds your data is one more place it can leak from.
3 billion
accounts
Yahoo, 2013 to 2016
2.9 billion
records
National Public Data, 2024
190 million
people
Change Healthcare, 2024
147 million
people
Equifax, 2017
106 million
people
Capital One, 2019
73 million
customers
AT&T, 2024
Sources: Yahoo and Verizon (2017), National Public Data reporting (2024), UnitedHealth Group (2025), FTC (Equifax, 2019), Capital One (2019), AT&T (2024).
What We Do Today
We Don’t Keep What We Don’t Need
We never store full card numbers, we don’t collect your location, and health items are removed from every receipt as it’s read.
Encrypted and Stored in the US
Your data is stored in Oregon, encrypted at rest (AES 256) and in transit (TLS), with a provider that is SOC 2 Type 2 and ISO 27001 certified. Every database connection must be encrypted.
Only You Can See Your Records
Every table in our database is locked so each member can see only their own records. Receipt photos are never public.
Stripped Before It’s Shared
Before any data is combined and shared, your name, card and contact details are removed. We never sell your name, email or phone number.
Passwords We Can’t Read
Your password is stored only in scrambled (hashed) form by our login provider. Not even we can see it.
Leave Any Time
Download everything you shared, or delete your account. Deleting it erases your account details, photos and login.
We Attack Ourselves Every Day
So We Find the Weak Spots Before Hackers Do.
Every day, 30 to 100+ automated attacks try to break into Reward My Data: as a stranger, as a member reaching for someone else's data, and as someone trying to give themselves points or admin powers. Every one must fail. If one ever gets through, we're alerted right away.
Protect Yourself Everywhere Else Too
Freeze your credit with all three credit bureaus. It’s free and stops anyone opening accounts in your name.
Turn on two step verification everywhere you can, and use a password manager so every password is different.
Turn off location for apps that don’t need it, and set the rest to “While using the app.” Turn off location on your computer too.
Stop apps tracking you. iPhone: Settings, Privacy and Security, Tracking, off. Android: Settings, Privacy, Ads, delete your advertising ID.
Block third party cookies in your browser and turn on Global Privacy Control, which tells sites not to sell your data.
Check which apps can use your camera, microphone, contacts and Bluetooth, and turn off what they don’t need.
Keep your phone, computer and apps updated. Updates fix security holes.
Join the Reward My Data community
A public benefit community centered around data privacy and economic inclusion. It's your data: protect it, get rewarded, and have a say.
Join free →