Hm. What about: - determining a nip, which requires the relays to delete and not share to other relays and have the means to do so. - informing the user whether the picked relays comply or not. - implementing a function that only a person using relays that have implemented the nip can also receive a note that has been send with that assumption. Would that not achieve the effect we are discussing. We can leave out the discussion of someone taking the information and publishing it somewhere else. That happens on Twitter and anywhere else. No?