Right? Maybe I'm not explaining very well. I feel like we're agreeing. Checking a bit and discarding at collection time is the easiest. You need to ensure d

Right? Maybe I'm not explaining very well. I feel like we're agreeing. Checking a bit and discarding at collection time is the easiest. You need to ensure data collection is aware of this setting, and anything that manipulates this data doesn't need to care whether or not some data is "hidden" or not. > That doesn't sound foolproof at all. Right - If you go the route of collecting all data and hiding it later then all tools that interoperate with customer data need to make sure they don't accidentally expose "paused" data back to the customer. Given two choices of throwing away data at collection time, or forever in the future trying to hide data from the customer, it seems simpler to throw away data at collection time.