This isn't an online game we are talking about, it is a fundamentally different kind of application, non-deterministic and capable of manipulation. The bar is much higher. They should collect analytics if it is necessary to provide the service, but they should do so transparently. The solution to snare cheaters can't be worth the sacrifice of trust through non-transparent collection of user data. Although this particular information might not seem sensitive, if they are willing to use this method at all, they are probably willing to use it in other ways.