There are more options than the two you mentioned. Listing a few as more people should remember them. I did get a bit off topic…

1. Use huge company to provide service.
2. Provide service oneself (, likely with Open Source. )
3. Use small or medium company to provide service (, likely with Open Source. )
4. Use huge company for things huge company is great with, but keep “crown jewels” of company on internal self provided systems.
5. Use a small or medium company to provide a service, and another series of small or medium companies to check on the first company.
6. Use a huge company based in a country that is very serious about laws and putting CEOs in prison for wrongful acts.
7. Do not do the thing. (Included for completeness.)
8. Do the thing not on a computer. (Violation of privacy could result in violation of more serious laws.)
9. Use an older technology on a computer.
10. Use the huge company to provide service, but ensure the data includes insane things.