If someone tries to access your account with a stolen password, we verify your identity using phone + address + order history before making any changes. Your data is never sold or shared with third parties.