Double anonymity seems as a great means for enforcing privacy in general for any data you generate taht you don't want other people to see. Like in a location

Double anonymity seems as a great means for enforcing privacy in general for any data you generate taht you don't want other people to see. Like in a location app on your phone generating (Lat Long) pairs. The app developer could just provide an inference engine running on a 3p trusted server to which an app developer has write only rights, e.g. a retrieval engine based on location — but cannot read. The user's app has read only rights — say get map tiles based on location. Its just that this is not the universe we live in sadly...(Maybe the EU will become that)