Comment by lmm

> Credit card entry, I think you should know a few basics like don't put it in MongoDB?? Or nah? It's just like any other user data?

> How about a background check - can anyone take a user-entered DL and randomly Google stuff to see what they find?

> Can I store your SSN in plain text in a text file? Why not?

You wouldn't be touching any of those unless you work for a handful of providers where that's their whole business. Usually you add the dependency, use their widget, and that's it.