I was using Avodocs (https://www.avodocs.com) to produce a privacy policy for our MLOps platform, https://iko.ai, but they didn't have PostHog in the list for the "Analytics" section, and they assumed that doing analytics implied sending user data to a third party site or something.
I tweeted at them and they were lightning fast in reaching out and adding PostHog to the options of the the privacy policy template. It's really cool: https://twitter.com/jugurthahadjar/status/144733750656389120...
For myself: I only do the most basic AWStats-style review these days. It feels more like reviewing basic overviews of server logs.
For others I work with: I offer them ethics-based processes and training and bring it up when appropriate. It's important to have some structure around this process and generally I find that people appreciate it. Nobody wants to be big brother if there's another way to get what they want or need.