Requiring a warrant would be better than the status quo, but the very existence of the data is too high a risk, in my opinion.