preventing data exposure