[gt2]

I've found myself in situation as well. Does anyone have advice on how to deal with the fear of handling users/user data for a product that you think people would love?

Is it incorporation for liability protection?

Terms of service docs that state nothing is hack proof?

Getting the right liability insurance?

In depth penetration tests prior to launching and continuously thereafter?

Continuously monitoring for suspicious activity on a server to detect hacks?