Demanding more regulation isn't going to solve this problem. Demanding that your therapist and family members abide by some sort of "regulation" just ensures that will only use software that is formally "certified" to meet the regulator's standards.
Microsoft has the lawyers and marketers to ensure that they can meet any regulation the government wants to throw at them.
Linux just solves it and distributes the solution, fast and free, to anyone who wants it. Nobody has time for regulators, so even though it is more broadly scrutinized and more secure than anything Microsoft will put out, it never gets "certified" by regulators.
You can best secure your privacy by pushing your therapist, your family away from Micoshit.
The US really needs to work on getting privacy rights in the constitution. There were some implied rights, but the current court's busy rolling out back.
Yes, I run it at home. Clever enough, Microsoft has this handy little trick of asking you about your region during installation. And so it knows who it can screw over, and who not.
So, a business who deliberately screws over its customers wherever, whenever, and however it wants, suddenly becomes perfectly trustworthy when you check a box.
Contrast, a system that just doesn't screw over its customers.
That depends, actually. Interacting with Americans on this platform does not expose any of my sensitive information. Then also, there are smaller orgs, and organizations that still do their best to get around regulations by hiding what they do or having convenient accidents.
It's not, and isn't going to be, perfect. But it's a lot better than having to play the paranoid.