The important part is whether the data are anonymous. You might be interested in the EFF's Best Practices for Online Service Providers: https://www.eff.org/wp

The important part is whether the data are anonymous. You might be interested in the EFF's Best Practices for Online Service Providers: https://www.eff.org/wp/osp https://www.eff.org/wp/osp