Replying to @alexanderhanff and @RobertJBateman, @neilmrichards
Yup, though almost all the relevant processing happens off device. But you're right that the ePD constraints on local storage make it very difficult to design effective data protection that helps users more than lawyers!