What do the terms of use and privacy policies say? Who's paying for the servers and what are they getting out of it? Also, since your data is federated, what happens when it hits a server with any different policies (or who may be in violation of the license of the software itself, but is getting no enforcement)?