What do you do to protect user data?

We assign a GUID to every user, which makes them anonymous, and we collect only non-identifying information such as device properties. We also require an opt-in for third party analytics data importing.