Ehmm... offering "consulting" should come with a contract specifying scope of work, data/device access, and expectations.