Just because you think your client data is protected, and just because a company claims it keeps this data private, does not necessarily mean it's true, according to K2's Randy Johnston.