I'm wondering how you can review an account about the respect of the policy if you are not suppose to collect any search data or activity data about members?
If privacy is your main concern, what data are you collecting to analyse?
How can you determine that at the withdrawal moment a report with no data??