A smart phone (101) for providing a user account (102) through which a user (103) is able to operate phone (101). The phone (101) includes onboard memory module (104) for storing at least first data records (105). Phone (101) also includes a user interface (106) for receiving input from the user. A processor (107) is responsive to interface (106) receiving a first predetermined input from user (103) for initiating a first authorised session (108) to account (102), and allowing user (103) to access account (102) and discover records (105). Processor (107) is also responsive to interface (106) receiving a second predetermined input from user (103) during session (108) for controlling interface (106) to seek a third input from user (103) to indicate an identifier for a hidden second authorised session (109). Interface (106) does not reveal to user (103) the pre-existence or otherwise of session (109) or any other like session. Processor (107) is also responsive to the third input not corresponding with the identifier for not revealing to user (103) if session (109) or any such other session exists.