A few months ago, ledger announced its new service allowing users to secure their wallet password through an encrypted service that kept them in their centralized service on top of the user. They had to put that service to sleep that proposal for a while when the market strongly reacted against it.
Today I was reading in Criptonoticias, a Spanish crypto news site, they keep the users data on their Ledger Live dApp for five years. It is an option on the settings of the service which is activated by default and can be disabled anytime by the user.
Asked about it, Ledger confirmed they keep the user transactions and IP for 5 years on their centralized databases in France to work on a better user experience, but they do not keep the user's personal identification data.
Keeping the ID, the computer language, region, and operating system, and mentioning you do not keep the user's personal information is treating your audience as idiots, to say the least.
I bought myself a KeepKey hardware wallet a few months ago when the shared private keys news where published. Have not moved my assets there yet but I intend to do so shortly. I trust Shape Swift always non-custodial service much more even when they had to keep users' info due to regulations before they started using Thorchain as their swap backend.