That's the real rub though. There is a ton of information that, in isolation, isn't confidential but when combined really should be considered confidential base

That's the real rub though. There is a ton of information that, in isolation, isn't confidential but when combined really should be considered confidential based on how clear of a picture it can paint about a person's life. Knowing an anonymous device ID went to CVS yesterday isn't that dangerous. Knowing everywhere that device has been tells you exactly who the person is, how they spend their time, what businesses they patronize, who their friends are, etc.