I'd add unnecessarily asking for a mobile phone number for the stated purpose of two factory authentication and then using that for privacy mining ala Facebook[

I'd add unnecessarily asking for a mobile phone number for the stated purpose of two factory authentication and then using that for privacy mining ala Facebook[1]. [1]https://metro.co.uk/2019/03/04/facebook-lets-people-find-profile-using-security-phone-number-2-8800876/ https://metro.co.uk/2019/03/04/facebook-lets-people-find-pro...