Thanks for the insight into what you (may) actually do with the data! There are so many companies demanding intrusive amounts of personal data that it's easy to become cynical.

All of the points that you've listed here would work just as well with anonymized data. Obviously if users are being picked up or dropped off at their house (for instance) then making every journey truly anonymous would be impossible without damaging the data, but you could still strip out explicitly identifying metadata. Are you able to tell us what sort of measures are taken in this regard?