At my previous employer. we thought pretty hard about what we were looking to collect and why. And how to avoid what we think of as sensitive.