It would be more reassuring for you to explain exactly how you do use the data. Are you training neural networks, even with aggregated/anonymised data? Are you

It would be more reassuring for you to explain exactly how you do use the data. Are you training neural networks, even with aggregated/anonymised data? Are you creating synthetic data? I'd be specifically interested in exactly how you "delete" data after the user requests this, and how you ensure that any data breach could not reveal identifying information. Perhaps HIPAA covers some or all of this, I'm not sure. But personally I'd want extremely detailed reassurance about these items.