When locational information is collected, people should be given advance notice and a chance to opt out. Data should be erased as soon as its main purpose is met.