I'd say it also needs to be entirely optional and be opt-in only. Any service, program, whatever needs to work fully for anyone who doesn't allow their data to be sold or released with extremely few exceptions.