avoid data disclosure