Is your IT provider really protecting your data?