The most sensitive data often has the least real content. Your social security number, for example, doesn't say much of anything about you - you might say it was a bit of math that refers to you. Why should businesses carry it around like it really means something and thus put you at risk? They could replace it with something else that remembers enough to do the work of your SSN but not enough to be useful to a hacker. This is the Capnion philosophy: no data, no breach.