The challenge here is to ensure that any controls that apply to law enforcement operating their own hardware for this purpose would also apply to them obtaining this information from a third party. We don't need the mayor setting up "Totally Not The Cops, LLC" that collects this data and "sells" it to his police department to bypass warrant requirements.