Ideally they wouldnt even have this key / the private data in the first place
The user can opt out of this if they want.
The user can opt out of this if they want.