We study the incentives of a digital business to collect and protect users' information. The information the business collects improves the service it provides to consumers, but it may also be accessed, at a cost, by strategic third parties in a way that harms users, imposing privacy costs. We...