IMO we are having the wrong conversation. We should be debating whether or not any user data should ever be allowed to be shared with third parties. We could live without it.