They may well be, the issue is something called re-identification. Even with anonymised data, even when using differential privacy, re-identification can be possible if you're not very careful. The more data you have, the more likely re-identification is.