Many financial providers treat privacy as a compliance issue, instead