Companies that are US-based can be depended upon to leak like a sieve with very little prompting. Given that, the EU option is the smart option. In the EU, there is at least a modicum of accountability and some expectation in the law (in theory but more importantly in practice) that people are respected and left alone.