...so maybe they should keep their hands off the aggregates as well? For the surge pricing, I'm a bit at a loss, because you don't need personally identifiable

...so maybe they should keep their hands off the aggregates as well? For the surge pricing, I'm a bit at a loss, because you don't need personally identifiable data for it, just a request counter per area ID, right? Maybe I don't understand it right though... Also, the reasoning should be the other way around: if I cannot provide a service respecting the basic privacy of my users, I should not be providing a service.