If their business plan is so simple that they will compromise it by telling you, they don't have a business plan. If they can't identify the small bit of secret sauce (algorithm or research, unique understanding of/access to the market, unique set of competences etc) that will make them successful and thus needs protection, they either don't have it, or they don't understand it. Either case is bad.