Can you share any details of how your encrypted indices work? Searching over encrypted data is an active research area. I'm curious to learn what you are doing in practice.

So you don't have any backups then? (And I mean actual backups - replication is not a backup)

Hmm, could they use on-the-fly encryption/decryption? That is, use a symmetric cipher to encrypt the stored data on the servers and then do a simple backup of the data. When you delete your account they would just delete the encryption key. Backing up the encryption key could be done on your side (send you your own encryption key if you need to recover your data).

we're going to offer that.

I think the worry was actually, "Isn't my data backed up somewhere even if you delete it the instant I tell you to? So then you still have my data?"

bingo. If they can delete my data on the instant -- then they quite possibly don't have backups. If they do have some form of semi offline backups - then not all of my data is deleted on the instant.

Not a worry so much as a harder problem that sometimes doesn't get considered.

Sorry to pollute the stream here, but...

I'm interested in talking to you about integration. I can't use the contact form on your website because every page now sends me to the "Thanks for signing up" page and, unfortunately, you don't have an email address in your profile. Can you (or somebody appropriate :) shoot me an email (address in my profile)?

Mint prominently provides privacy and security information, and background on how they secure the system. You should similarly provide something on the front page, providing some of the details you've mentioned elsewhere in this thread.

Thanks for caring about the privacy of user data so much from day one!

that's not true. I can not delete my account at this very moment. You have sucked in 6 of my accounts and have not showed me an ounce of value. That was a terrible decision.

that was the risk you took when being a very early adopter