How is my question worse than, for example, this one?
I believe I have provided a fairly comprehensive list of requirements, so that a best answer would be possible. Of the 10 requirements I've noted, only 2 could be considered subjective (History of privacy-consciousness and inoffensive interface).