"The fact that Mixpanel has this data in non-de-identified form is suspect to me."

The way mixpanel works is that they tag users with a device ID, then once they become a customer, you back port your own customer ID to mix panel and they switch the device ID to your internal customer record so that you can see what your signed up users are doing, where they signed up from and generally track the user journey.