service api privacy