Comment by memonkey

one idea i was thinking for anonymizing data when sent to models is to hash or modulo with salt some values before sending it to the model and then unhash/unmodulo on the result. in other words, a way to keep the users data their own. just an idea.