is there any user control over this? otherwise, this is an totalitarian's dream come true. i'd suggest thinking about this capability a little more in relation to "positive impact".
Sensitive data that is collected from participants that users interact with are typically governed by policies set by Institutional Review Boards or Ministries of Health.
note, for instance, that many gov agencies blindly and willingly send PII to google without participant permission.
People know they are voluntarily filling out a form and for whom. It just doesn’t go to a server immediately due to lack of signal.
How is this any worse than voluntarily filling out a printed form on paper and putting it into a mailbox to get picked up later? A practice that has been socially accepted for decades?