OKC's collection was from their own service that people had clearly signed up for and provided data too--even if they released those studies a ways in the past

OKC's collection was from their own service that people had clearly signed up for and provided data too--even if they released those studies a ways in the past before people were as familiar with privacy concerns, it was at least a more direct relationship with the subjects. Some aggregator third-party add-on library integrated into other apps snarfing up data is a bit different and more concerning, though thankfully it's the specific sort of thing GDPR and CCPA were designed against.