While that is possible, I strongly suspect that in Audacity case it is because they are outsourcing the data collecting to google analytic services, and google uses the personal data as payment for the service.

They could do the data collection themselves and chose not to store personal identifiable information, in which case they can remove the legal boilerplate since it won't be needed. This suggestion naturally already exist in the GitHub issue.