How many of us developers would take a principled stand when tasked with implementing features such as these and how many would silently comply?

I know I've folded unknowingly, adding all sorts of extra tracking including behaviour tracking to my startup's web app and looking back now I believe it's one of the reasons we ultimately failed because we broke trust with our users.