Maybe you don't see it but the problem is the provider was bringing some affirmation to your post and in the process, said the quiet part out loud when she emphatically stated that she DOES retain emails from clients.  I'm asking the relatively simple question of when does she delete the PII that was passed along in the initial or the follow up email after PII was requested.

There are a number of reasons I can understand why a provider retains an email, the primary being is that it documents for a lack of better term, a safe/known/repeat etc client.  Keeps pretty easy books that way as well.  Now, this provider has been one of MANY that has assured us that no retention of any of our information happens...in fact, the information is always deleted "after".  After vetting? After the goodbye kiss? After the tour?
  Now, these may not be necessarily her exact words, but words similar that are repeated by many and perhaps, yourself every time this comes up.  Usually followed by the inclusion of "no reputable provider" assurance phrase somehow mixed into the justification of collecting PII.

So, she has had the opportunity to tell us at what point she deletes the PII but chooses to ignore it.  In previous post, she did infer that certain PII was needed should the client have a medical condition that would allow authorities to be able to notify next of kin.  That leads to the obvious conclusion that PII is retained until after the session has occurred.    

So, I ask again, when is the PII abated from the initial email where it was sent in and, in the case of a platform such as gmail, ALL of the other layers of the initial email as a conversation goes back and forth.  You see, I'm not making the case that the provider has bad intentions but anyone hacking a known escort's email is likely doing to with the worst of intentions and the provider will likely just be collateral damage.  The prize will be what is buried in the hundreds of emails that may or may not have been deleted.

So, this provider took no step toward alleviating my concerns but she did validate a critical point that I have been making for quite a while.  

 I'll finish with this before I get to the homework.  

  I believe that providers operate in a very dangerous environment and I understand why they would take every step they could to safely to about their business.  When a lady comes to visit me, I make sure the space (hotel) is fully illuminated and all doors (bathroom, closets etc) are open so they can see we're alone.  I'll actually step away from the door to allow the lady to enter and also feel that she can gtfo if needed until she can see all is good.   I don't want a shred of apprehension or doubt spoiling the beginning of a date.

I also believe most people operate in this world with the best of intentions but sometimes things go wrong.  Bad decisions often cause bad circumstances.  Bad circumstances cause good people to do bad things.  I believe people for the most part are honest and want to do a good job, especially in the service industry.  That said, things go off the rails sometimes and that is what can blow back on clients in worst of ways.  Providers, their assistants, possibly their room mates, boy/girlfriends all can potentially access this information if it is not abated.  

Now the If I Were a Provider part;

If I were a provider and the security of my clientele was as important to me as it was to him/her, I would:

• what would your standards and protocols be?  
 
I would create a 2 part system using 2 different devices that were never synced.  I'd consider something very simple as a kindle or notebook.  In that, I'd keep my black book of client nicknames or handles and their corresponding email with my own thumbs up/down system where other notes could be taken such as likes, dislikes etc.  I'd keep the correspondence thru another simple device that was easy to operate with for correspondence.  Both would be on the cheap side in case it needed to be gone fast and for good.  I'd operate this thru a VPN ALLWAYS.  Once I had the vetting complete, all info would be deleted and the client's basic anonymous info would be entered into the other device.  I would look to the IT world to provide very good software for cleaning out information that is supposed to go away..  At this point, I don't think a provider would have more than $500 wrapped up (not including software subscriptions) in it.  

So the SOG once client PII is acquired would be to enter that into whatever platform is being used (maybe on a 3rd device?), process the results and affirm/deny the client.  Enter new data (handle/email/pass or fail) into the secondary device (ex Kindle).  Expunge all PII.  Done

Take the above as layman suggestions,  my expertise does not come from the world of technology.  That said, at least hearing the slightest bit of effort in the permanent (if such a thing exists) removal of PII would go a long way in making clients believe providers were on the same page or even gave 2 fuks about it.  

• if a semi-regular reached out to you (see them 1x/quarterly) - how would you be able to recall who they are?  

You have their email, look in the Kindle

• If you had seen someone a year prior, how would you recall who they are?  

See above
• If someone you only saw once emailed you for a reference - how would you recall who they are?

See above but I'd suggest a moderate reference fee or honorarium for the effort.  I'd easily throw $50 for a reference, wouldn't bother me a bit.  Risk/Reward at it's best.  Thank you Paige, here's a $50 electronic gift card to Vic Secrets or Menards...