We decided that we didn't need to collect the data in the first place, so we sidestep the issue entirely. In reality, the amount of data an application needs t

We decided that we didn't need to collect the data in the first place, so we sidestep the issue entirely. In reality, the amount of data an application needs to collect is very small. Everything else is mostly for marketing purposes. Eliminate the latter and it's very easy to comply with GDPR.