Ah fair point, I seem to have broadened the scope in my mind. Just tracking and sharing of user data in general, so long as you aren't trying to do business with entities that are regulated, is pretty wide open in most states in the US.