Balancing privacy and security