Hacker News new | ask | show | jobs
by M95D 1 day ago
1: If you want to protect user's privacy, you collect no personal information, so GDPR doesn't apply.

2: You do that.

3: Since your platform collects no private information, they get nothing from you. If they collect private information on their own, it's their job to comply with GDPR.

What you should do in case (3) is ask the user for permission to allow the 3rd party access to private data on their device. It's their choice (not yours) to allow it or not.