I'm well aware - as a public university things are a bit different as they are agents of the state so this becomes a free speech issue. Also, if a university's student internet is the same network containing PII systems like their student records, there are much bigger problems. That's why I mentioned that this action without any legislation that would curtail Bytedance's data collection presents a student rights conundrum. The app does not (as far as we are aware) inject or capture information from the users network but rather the user themselves which they have consented to. The larger issue is whether or not the US should allow foreign entities to collect this info and that's not something the university should be able to decide but rather the state and federal regulatory agencies and legislatures