SEC: Practice What You Preach on Privacy