I would. Better to be overly cautious if you're serious about protecting user data and privacy.

IPs specifically are quite likely to reveal some identifying info, and it's obvious how trivial it is to find that info. Even the company itself isn't looking that info up, losing that info could expose their users.