In 2020 the data about learners is escaping the premises of the learning institutions. The personal information about students and their activity while they interact with Learning Management Systems and Online Learning Tools is in custody of cloud computing providers, and Learning Tools vendors. The model of Software As A Service allows service providers to control all the information about the students. There are an increasing number of cases in which we know that this information has leaked, or has been used in a shady way. This paper analyzes how this situation came to pass, why this is wrong and goes through examples where data and metadata about learners is being gathered in shady conditions. Finally, we conclude that this problem has several dimensions: legal, organizational, cultural and technical, how any solution needs to address these four dimensions, and that we should better get started working on it.