Keep contributor identity out of public intelligence.
Public information should be aggregated; exact GPS/address should not be exposed.
Evidence should be stored privately.
Collect only what is needed to provide and secure the service.