In addition to ensuring account security, we were collecting the user-agent to transform API responses depending on the client.

But your point is valid. Just the operating system and app version is enough to derive this information. We will make this change and update our privacy policy.

Thanks for bringing this up!