As usual, the answer is never "collect less data."

That's the only sensible approach. It's the one that I use, but then, I care about the users of my software, and I don't make any money from their PII.