Let's say we have a mobile app, where every user is associated with app-generated unique user id (ex.
- Having the uuid itself that's not possible to identify a user.
- Having the uuid and access to the app backend infrastructure that becomes possible (by querying users by uuid).
What're legal aspects of usage Crashlytics.setUserIdentifier method in such case? Is it safe to use considering GDPR changes?
I believe the answer depends on the jurisdiction user belongs to. I'd like to find a rock-solid legal answer at least for the US, the EU (GDPR), and Russia (152-FL).