Boost is 100% confidential. People talk about complex power grabs and political situations all the time. For Boost to work well, people need to be able to trust it with Information thy want confidential.
Are your coaches licensed professional counselors, therapists or psychologists? If not, those conversations are not actually privileged; any disclosure of legally protected information (like a company's sensitive internal documents) would be highly improper.
Also what about legal blowback if they give really bad advice?
Interestingly enough, "licensed career coaching" is a complete sham. There's no real accreditation or regulatory environment: the largest career coaching programs that bestow certificates are private, for-profit orgs and give out their certs like candy on halloween. It's really sad.
I agree that there's a large amount of information that probably shouldn't be sent to us, but people also need to give us the full context for their personal problem. We don't encourage people to send us information we don't need, and often they can get by with indirect info... "we're raising $8.6m on a $100m valuation" -> "I think we're going through additional funding soon."
It's not called a 'licensed career coach' -- privilege, in this case, is a legal protection that is not afforded to the type of relationships you're talking about. You're putting yourself, and your clients, in a very legally tenuous position.
Would you consider adding anything to the UI to discourage your users from those potential lapses in judgement? And if not, what do you do to protect the sensitive information you may find in your hands?
Once we can expand the team further, hiring a full-time security engineering staff will be a priority. As of now, we have the basics down... full E2E encryption, security access privs, etc.