Hahaha, legal compliance is a hell of a drug. 

I'm building my app so we don't have access to any user data and I look forward to telling those alphabet boys, "you can't get a single character of user data."