Whose data is it anyway?