Balancing personalization and data intrusion risks