Mike should have used a GDPR-enabled app.