I see what you mean, but the statement is false as written. If it were 'You have an app that only stores non-identifying data in the cloud', then it would be c

I see what you mean, but the statement is false as written. If it were 'You have an app that only stores non-identifying data in the cloud', then it would be correct. That said, depending on how you code your app, you might end up logging user requests in a way that could end up causing issues by accident. You'd have to make sure that the unique identifier can't be matched up with an IP address in any way. I think the article is giving advice which is overgeneralised, and could very easily end up misleading its readers.