In reply to Brin Wilson.

I agree, those are important factors. HostingReviews.io considers four of the five. Security would be hard to track via Twitter. People are always tweeting that their site got hacked and blaming the host when of course it is not clear that it is actually the host's fault (so I pass over those). Most WordPress sites I've seen compromised have been running old versions and you know the kinds of passwords people choose.

I do see some tweets from people complaining that their host just sent their password via email in clear-text or that they were upset about being asked to provide part of their password over the phone for verification. Sometimes it's necessary to store server passwords in order to provide support but it gets me wondering about the security practices of some hosts, those providing shared service in particular.