It depends on the type of data. If you are collecting only the necessary data to provide value to the user (e.g. ask for GPS access for a mapping app), then you

It depends on the type of data. If you are collecting only the necessary data to provide value to the user (e.g. ask for GPS access for a mapping app), then you can assure the user that data is collected in order to provide the service and be clear about what you will do with it (e.g. aggregate it for analytics purposes, but not in an identifiable way, but not sell that info to advertisers). You may have to comply with CCPA or GDPR so that may guide you as well.