Yes, that is true - they would have to comply regarding the data collection. However, they would not need to impose limitations on the usage of application itself, only on the tools/platform used to submit the data.