The lesson of this story (of a Catholic blog using commercially resold Grindr data to out a gay priest) is *either* that anonymised data can always be de-anonymised (pretty much the intuition of lots of experts I know), or, less generally, you can't expect an org that benefits from selling other people's data to calibrate how much they should spend on anonymising.