E-mail providers and sensitive/financial information

IMO a huge service provider like Google already knows too much, so I don't care to share my email with them too. Even if the email content is encrypted much is revealed by its meta data. Since info is exposed by online activity, I'd rather it divided amongst various service providers such that the data is not all in the hands of one.

Regarding a "trusted service provider" you have to decide what attributes qualify for your trust. I judge that by a provder's website, their apparent size (IMO non-huge is better), how long they've been around, etc.
 
What exactly is the purpose of your "own" domain name that people keep bringing up? Several users have already illustrated that is not by any means more "secure" than say Gmail. Is it to simply have a "permanent" email address?

Exactly. So let's call my domain CosmicAvenger.com, I can use any email address at that domain, like The@CosmicAvenger.com. But I forward my domain mail to Gmail, because as I said, their storage and search functions are the best I've seen. And your points about Google's infrastructure are exactly what I was trying to say earlier. I don't think anyone actually gets bank statements via email, right? I generally don't even click on my bank's emails even when I'm expecting them, or on the rare occasion they send me a link to something that I asked them about, sometimes I'll go log into my bank's site THEN click on the link. If it's a valid link, I won't need to log in again, as I already have a session opened. If it's a scam, it'll ask me to log in again.
 
1. Nothing is private. The NSA hoovers up everything.
2. Having your own domain means never having to change your email address.
3. Use a POP account and your emails will not remain on the server.
4. Don't save sensitive info in emails if you are paranoid. Save that info in encrypted form on your PC.
 
Gmail. I got tired of having to spend literally hours changing email addresses everywhere when our ISP got merged/bought out 3 or 4 times. Not having to go through that again is priceless.
 
Gmail. I got tired of having to spend literally hours changing email addresses everywhere when our ISP got merged/bought out 3 or 4 times. Not having to go through that again is priceless.


There aren’t enough plus signs on the planet to apply to/agree with this. It can take forever to complete the switch.

I use Gmail accounts (3 of them for distinct purposes) now and Yahoo! for questionable places like early-retirement (kidding but true).
 
Thanks for all of the replies! It seems I have a lot to learn and to research.

I guess what I consider sensitive, you all don't, so I'm relieved there. I never email financial statements, bank account numbers, SS numbers, etc.

I was more referring to the mere fact that, say if I use gmail, that they'll know I have an account at Schwab, Vanguard, XYZ bank, and what CCs I have when they send me the notices of transactions/available statements/bills paid.

...

If somebody knows I have a Vanguard account, what good does it do them? Vanguard has millions of customers. I'm just one of them. True, they can see that a transaction was for XXXX dollars when VG notifies me of such. That is good for me to see in case someone has hacked the VG account. So they maybe can tell how big a fish I am from that transaction email. But my house is on Zillow and they could easily infer I am not a pauper. The bad guys still need account numbers, passwords, etc. etc.

I guess the best thing I can think to do is to not have too much email left after reading it. So delete notices and maybe even go into the trash and delete it so it doesn't sit for 30 days. I use gmail too but don't do the early trash removal.

I don't get any of this stuff in the US mail except a few things like utilities. All the financial stuff goes to the gmail account.
 
Last edited:
Why?
Your email provider can be anywhere on the planet.
Off planet is a bit trickier.

The e-mail I'd love to keep is with the ISP who is regional and doesn't serve the area we will be moving to.

Say we have internet with (fictional) Midwestern Cable and our email address is myname@midwesterncable (dot) net and we move to the southeast, outside of Midwestern Cable's service area. We lose that e-mail when we cancel the account.

Have you asked your ISP if there is a way to keep your email address? After I left mine (moved), I still received emails sent to my old address. I wouldn’t think it would cost them anything to keep your email live. Maybe they’ll allow you to keep it for a very small fee.


I have not but it's something I've made a note to ask about when we finally call to cancel service. I don't want to do it now because every time I talk to them, they mess something up on the bill. :facepalm:

IMO a huge service provider like Google already knows too much, so I don't care to share my email with them too. Even if the email content is encrypted much is revealed by its meta data. Since info is exposed by online activity, I'd rather it divided amongst various service providers such that the data is not all in the hands of one.

Regarding a "trusted service provider" you have to decide what attributes qualify for your trust. I judge that by a provder's website, their apparent size (IMO non-huge is better), how long they've been around, etc.

I agree about Google. Why make it easier for them to fill their files on me? :cool:

I've made a note of the trusted provider tips. Thanks.


1. Nothing is private. The NSA hoovers up everything.
2. Having your own domain means never having to change your email address.
3. Use a POP account and your emails will not remain on the server.
4. Don't save sensitive info in emails if you are paranoid. Save that info in encrypted form on your PC.


#1 doesn't bother me, actually. It probably should, but it doesn't.
#2 it sounds very appealing just from a coolness factor, if for no other reason
#3 I think our ISP is POP, come to think of it (this is more DH's area than mine)
#4 I don't save sensitive stuff such as those aforementioned notices of statements being ready, etc. I don't know if I'd say that I'm paranoid, though, just more like really ticked about all this data mining and hacking.

Thanks for the ideas.

If somebody knows I have a Vanguard account, what good does it do them? Vanguard has millions of customers. I'm just one of them. True, they can see that a transaction was for XXXX dollars when VG notifies me of such. That is good for me to see in case someone has hacked the VG account. So they maybe can tell how big a fish I am from that transaction email. But my house is on Zillow and they could easily infer I am not a pauper. The bad guys still need account numbers, passwords, etc. etc.

I guess the best thing I can think to do is to not have too much email left after reading it. So delete notices and maybe even go into the trash and delete it so it doesn't sit for 30 days. I use gmail too but don't do the early trash removal.

I don't get any of this stuff in the US mail except a few things like utilities. All the financial stuff goes to the gmail account.

I guess I was just thinking more of these metadata files and hackers having a complete file on me for nefarious purposes. "Them" knowing where I may have money and who I bank with is creepy, whether "them" is Google, Facebook, Yahoo, or some hacker getting a huge file of financial websites to try hacking passwords.

We only get junk mail in the mailbox these days, so that's taken care of and I purge files in case of hacking my accounts, so I guess that's the best I can do, eh?



My take away from all of your posts and tips is that I'm overly cautious about this, that I'm already doing what is sensible, and that I should take a chill pill. DH will be thrilled.

Thank you everyone!! :flowers:
 
Gmail. I got tired of having to spend literally hours changing email addresses everywhere when our ISP got merged/bought out 3 or 4 times. Not having to go through that again is priceless.

Having my own domain means I never have to change my email address and notify everyone about my new email. I also don't have to worry that google will one day stop gmail like they have done for other free services they run.
 
Their reply included all my info, including full CC name, number, date, and the CVV number! Can't get more clueless than that (except trusting them in the first place)...
When I pay by CC, I always send the CVV under separate cover without identification. Then the clueless recipient confirms my charge with all the info in an email, even if I call them to provide the CVV!

So I resign myself to checking for fraudulent TX on the CC account. So far so good. All my financial statements that come by email (from smaller providers) come by password protected PDF. The others just alert me to sign on.
 
When I pay by CC, I always send the CVV under separate cover without identification. Then the clueless recipient confirms my charge with all the info in an email, even if I call them to provide the CVV!

A couple of my CCs will provide a temporary fake CC number for such transactions but this seldom comes up for me and I have never bothered to try it
 
The e-mail I'd love to keep is with the ISP who is regional and doesn't serve the area we will be moving to. ...
Well, if they don't want to keep selling you email service that is their choice. There is no technical reason to prevent it. My email and private domain are handled by an ISP that I have not used as an ISP for quite a while. They are happy to get their ten bucks a month plus annual domain name maintenance fee.

Sending and receiving email is a simple matter of contacting an SMTP mail server where you have an account and a password. It can be anywhere in the internet. As @davebarnes points out, though, using an off-planet SMTP server is somewhat problematic. How far are you moving?
 
Last edited:
I've used gmail from when gmail users were invitation only. I use 2nd level verification to protect against the account being hacked.

I don't believe that any financial account information is ever passed by email to me or from me. Banks, brokerages, utility companies etc never send me statements via email, just a notice that a statement is now ready and can be viewed and/or downloaded from their secure site.
 
Back
Top Bottom