I was using Avodocs (https://www.avodocs.com) to produce a privacy policy for our MLOps platform, https://iko.ai, but they didn't have PostHog in the list for the "Analytics" section, and they assumed that doing analytics implied sending user data to a third party site or something.
I tweeted at them and they were lightning fast in reaching out and adding PostHog to the options of the the privacy policy template. It's really cool: https://twitter.com/jugurthahadjar/status/144733750656389120...
For myself: I only do the most basic AWStats-style review these days. It feels more like reviewing basic overviews of server logs.
For others I work with: I offer them ethics-based processes and training and bring it up when appropriate. It's important to have some structure around this process and generally I find that people appreciate it. Nobody wants to be big brother if there's another way to get what they want or need.
Just like you, for my own projects, I've been trying to rely on server-side generated analytics till but there are some valid concerns from my team about data sets missing for the projects we work on.
We're going to try and self-host Plausible.io since it's open-source, doesn't require cookie consent, and seem to value privacy while offering valid data points for us to be able to optimize our website experiences.