Collect only data you need, tell users what you do with it, let them export and delete their data, and secure it properly. For most apps this is achievable engineering: consent flows, a data export endpoint, deletion routines and a privacy policy that reflects reality.
Have a question specific to your product?
Share the context and I will reply with a practical next step.