Am I overstepping? Informing parents about TT policy change/ insecure data

Hello everyone! Full disclosure: this is my first Reddit inquiry (eek!), and boy, do I have a fun one.

I'm a middle school teacher, social studies to be exact. My students are 11-13 and are CHRONICALLY online— especially tik tok. A few weeks ago, I was browsing MY fyp, and through a coworker's account, found an entire web of student accounts.... all public. It took me some time to come up with the right words, but I did specifically mention to those students that if I could find their account by accident, than other people with far worse intentions would be able to as well. I kid you not, one girl responded with a simple, “but then I won’t get followers!” Not disrespectfully, but very matter of fact. Ever since finding their accounts, my conscious has been heavy with whether or not I should take additional steps to protect their digital footprint.

Fast forward to a few days ago when TT changed their terms of service. If I wasn’t worried before, I definitely am now. The scale of data mining that is explicitly laid out is appalling to say the least. I mean, we’re talking about harvesting the data of mental illness diagnoses, gender identities, immigration status, and medical information.

I personally do not have my own children. However, I care deeply about my students and their safety (duh). I genuinely, genuinely do not think that most parents of my students are privy to this information, especially given how their students talk about the internet. So… do I tell them? It feels like I’m suffocating silently, having this information while simultaneously watching my students goof off on this exact app, with a PUBLIC account. I’m worried about overstepping, but I also think the tone would be important. I’m trying to come from a place of concern, educating parents about an app that they very well might have never used. Thoughts? What are you doing in your classroom communities pertaining to internet safety, specifically TT? TYIA!! :-)