No way they’ll come clean just because you’ve told them too. No plausible way to enforce this. They should just not collect that data unless needed directly in an investigation.