“If apps shared user data on their own in other cities,” they would be sued for violating their own privacy policies, said Daniel Castro, vice president at the Information Technology and Innovation Foundation, a think tank. “It shows how peculiar this law is.”