If someone did it, it’d likely be opt-in and only for a short, finite period (1 week?) with the data being destroyed after it’s used.