Safety is the real worry here. If you lose people’s PII it can be used for malicious purposes. You don’t want a dictator being able to take a picture of a protesting crowd and identify people based on that. Make sure you’re following best practices and trusting no one.