[neilv]

In other words, the intimate data doesn't stay on the device, and the user must trust the company that is grabbing the data.

Regarding trust, the must trust the company to not misuse the data now, must trust that future version of the company (and asset acquirers) not to misuse the data, must trust the company to perfectly secure the data against intruders.

(The talk of encryption and anonymization is usually mostly a diversion or misunderstanding.)