I couldn't agree more with your comment. Maybe there is a way to collect data about user only after they have been anonymized, so the data would contain only what user_xxx does, with no way to map user_xxx to his real identity.

I don't think it's trivial, but I hope to see some regulations coming in the way the data are collected and stored.