Comment by cimm

I like the idea, but I wonder how this works in practice. If I grant ACME Inc. access to my “profile picture,” for example, won't they just copy the file and store it on their own servers (be it for performance reasons, tracking, ease of development, whatever)? How does this keep me in control?