I'm not even OK with this. I have very little trust in the average small business' ability to protect my information, on a technical level. I have more trust in their desire to protect my information - but that's not sufficient by itself.