How much control should people have over their financial data?