Different jurisdictions differ. Even if you collect your own and it contains identifying points, laws like GDPR will require you to attain informed consent before you collect it, along with methods for people deleting their data, and a million et als.