Protecting User Privacy In Remotely Managed Applications