Some time ago, a client asked me to develop a website for their small company and to find a provider to host this. The web application will be hosting private data about the clients of this company and so on, stuff that shall not be watched by people that doesnt belong to the corporation. After this requeriment, a question came to my mind: how realiable are the average LEB providers to offer such privacy?
I know there are ways to encrypt the hard disk (LUKS, dm-crypt) and the communications using safe protocols, however, the admin of the provider could always watch the data hosted there. May the data is encrypted on disk space, but it will be always possible to install some rootkit that debugs at memory once the data is decrypted.
Even if I get a full dedicated server, there will be some hands able to mess my data. So, is there any way to host private data on server that you don't know if are trustworthy?