Hacker News new | ask | show | jobs
by afro88 1150 days ago
How do you know what data is sensitive, and how do you anonymize?

Thinking of apps that might fall under HIPAA etc

1 comments

We have a few privacy controls in place:

1. We hash all inner text and then backfill static strings on the server side. So every text that is specific to the user remains hashed

2. We detect special cases like passwords, SSNs, credit cards, and completely block it (even not hashed)

3. We provide full privacy controls to our customers to easily mask any sensitive elements

4. We discard the user IP and don't require any PII to be sent. So we can connect a session together, but don't really know who the user is