+ password or SSO protection for access to the app's data (use Kerberos/AD SSO for credentials?)
+ an end-user controlled encrypted store for the data & screenshots (FUSE/WinFSP?)
+ a daily local push/popup notification displayed to the logged-in user with... a) app status b) data summary c) a quick action to toggle the background recording service on/off
Just my $.02. Cheers!