The thing is, you can do the same statistics without including the user's email address or otherwise directly linking a data point to a specific person.

They may need to retain certain information for laws, but they aren't obligated by law to also share that information with their analytics partners.