The data that organizations gather about their users can vary between strictly commercial information (what books did you buy on Amazon) and much more private information (what medications did you purchase from an online pharmacy). When deciding on the proper architecture to run an application on do companies have an ethical obligation to consider the security of that architecture as it relates to the data that will be stored on that architecture? If this obligation exists how should it be considered against potential cost savings associated with the use of the cloud?