You should worry more about the way you handle data as small business without expertise in security and privacy. Big companies like Make and Zapier have proper rules to handle data properly. You should care most about PII data and how you store it and where you send it