A fair question to ask of any identity provider, and the architecture is the honest answer rather than a promise.
There is no central credential store. Your credentials are device-based and biometric-secured, held on your own hardware. There is no password database, which means there is nothing for us — or an attacker — to hand over.
We cannot see your everyday activity. Sign-ins run through anonymous aliases, so services cannot cross-reference your behaviour across the internet, and neither can we.
Sensitive attributes are gated by you. KYC status and trust score attach to your Core ID and require a specific sensitive-data permission that an application must request and you must grant.
The one thing we do hold: if UIID Cloud is enabled, an encrypted backup of your identity, so that a lost device does not mean a lost identity. You can switch it off and hold an exported .uiid file as your only copy instead.
Whether we can suspend an identity, and on what grounds, is set out in the Terms of Service at http://legal.linkspreed.com.