yeah, there should be some rule about what user data can be collected and transparency about its usage...
wait, that's the GDPR! grin