The article didn't necessarily clarify what type of data was being reported back, which I think is key. It mentions diagnostic data (I'm assuming crash logs and such), but it says "personal data" without specifying.
I think that would be a very helpful bit to surface before a solid judgement call can be made. Anyone with more info?