[soumyadeb]

That one was a security incident—data that had been legitimately collected by an analytics provider was exposed due to a breach.

This one is about privacy — what data an app chooses to collect and which third parties it intentionally sends that data to. The concern isn't that someone hacked those companies. The distinction is important for us.

Disclaimer: RudderStack founder.

[wpm]

The word "legitimate" is doing some work there

If they can't keep it safe they have no legitimate interest having the data