The company should encrypt user communication and private content so users can control who has access to it.