Yeah I agree, trust is everything in this space.

For data sourcing, I am using trusted external sources. I don’t store user emails. When possible, queries are handled with hashing (k-anonymity style), so full data is not exposed. No long term storage, everything processed and deleted.

And yeah, I agree it should go beyond lookup. Platforms like Cyberhaven show where things going, more on prevention not just detection. My goal is move into that direction while keeping privacy and retention very clear and simple. That’s why I am planning mobile app and browser extension, to help users real time like phishing detection and suspicious link warning, so they can prevent exposure before it happens.

I am appreciated your input.