> The proper solution would be not to collect personal data, especially if it is not necessary for functioning of the app, rather than worry about who is going

> The proper solution would be not to collect personal data, especially if it is not necessary for functioning of the app, rather than worry about who is going to buy the company. How would that work? Even if the app doesn't collect data now, it could always be modified to collect data later. The problem isn't so much the data they collect, but the users they have. Avoiding the collection of personal data only mitigates against actors who can only access data passively, like in data breach events. It doesn't mitigate against actors who can initiate active collection of data.