I've asked around and gotten five different answers, so a larger group felt like the right call.
Data privacy is a bigger concern for me than most. I won't use anything with a vague privacy policy, so keep that in mind when you recommend.
Recent experience preferred — things shift fast enough that anything older than twelve months may not apply.