I propose requiring explicit opt in for each piece of data collected, and explicit opt in for each piece shared to a third party. Failure to opt in for a particular piece should only result in the degradation of features that can be reasonably explained as requiring the data.