I think at least initially the ‘product’ is datasets which don’t show individuals. You could of course build out a future direction which is differentially private.

More or less my initial approach to this is you take a grid, and you show movements/density on that grid. If necessary you coarsen the grid to avoid reidentification of individuals, and ultimately to get a good picture of the population given the biased sample which is the union membership, you need a statistical model on top which also helps from a privacy perspective.

State actors demanding individual location history is definitely an issue. I have a few possible approaches in mind to defend against that.