I wouldn’t give them a cent or negotiate at all either, and the public aren’t going to give a shit about how they’re being tracked.
Negotiating is futile. They can never prove beyond “trust me bro” that they deleted the data, nor that they kept it secret, so why would they actually follow up?
Whatever they have, if it is good they have already sold it to several interested parties under the table, and they will continue to do so. This is just an attempt to grift out a bit of extra cash.
I kind of assumed that everything that could be logged was, and that it would be data-mined insofar as value could be extracted from it down the line.