Attio collects highly sensitive personal data, including emails, calendar, and files, when users connect third-party services like Google. While they claim strict limits on how this data is used and shared, the sheer volume and sensitivity of collected information inherently increase privacy risk. The lack of CCPA support is a minor drawback for US users.