[kbmittal]

1. "Authentication Tokens" are stored only with user permission. Why? So we can seamlessly allow the user who gives us permission to post to FB, Twitter. Its standard industry practice.

2. non-personally-identifiable information is something every app collects and should do so. It helps us understand our how to serve our users better. With respect to 3rd parties - see 'Kontagent' for example. They're a super smart data analysis company. Why re-invent the wheel. Again, a standard industry practice.

Hope that puts your skeptical viewpoints to rest :)