How do you know it's not going to be used after the user explicitly accepts sharing data?