I dont know why we're not looking at the obvious answer here. Encrypt the data behind warrants and require narrow parameters for the warrants. It will require state-by-state implementation + legal changes sure but it's the safest, simplest solution.
P.S: Anyone know how London has solved this problem?