Recall is problematic even without phoning home - it records screenshots of your screen every 10 seconds or something, OCRs them without redaction, and if it's not sufficiently protected, all it takes is someone getting access to that DB to get a treasure trove of your data, no keyloggers...