It's against Google's terms of service to collect personally identifiable information so it's anonymized there, too. It's the same -- you can collect data server side via the measurement protocol via the same hit parameters. Either way, you can be responsible about measurement.