If her "stuff" is that portable and the service provider has at least some kind of read access, how would one prevent the service provider from simply keeping a mirror of Grandma's data on their own servers?