Comment by tertius

Can you name one example where the context was not someone who was handling/processing/had the data as a part of their platform (i.e. FB) but rather a hosting provider where you've been burned assuming?