I treat our subscribers how I want to be treated. I'm not a business person, I'm an engineer, I care about my privacy, and I love the EFF. Any company who wants to "buy our data" is going to get an emphatic middle finger, and our logging infrastructure is selective and highly amnesic where it needs to be. I mostly log ICMP & network control traffic (OSPF, BGP, etc) because that's the kind of data I do care about which is valuable in tracking down issues or service incidents. Also I always get prior permission and a very specific ~5-15 min time window from someone before we dump/analyze real traffic for a problem they're experiencing.