(Not disagreeing with your point, pointing something else out) What happens when flock sells the company + data? That collected data doesn’t get deleted and could be used for whatever purpose at that time, as the company could be dissolved along with the contracts.
That’s not how data agreements work. The city/entity would need to agree to the revised contract. Is it possible? Sure. Is it something I am concerned about? No, I would rather focus on the facts.