> umm when a thief steals and gets caught, we don't just punish them. We also recover what was stolen. > > They should also be made to delete all user data collected during the period, and pause similar data collection for x months/years even the ones that fall under their service terms. The price of wrong doing should be high, and for meta deleting historical user data is the highest form of punishment .

How was the data stolen from users? Do the users no longer have access to their own data? Was it deleted from their devices?