GA is absolutely problematic. It's one of Google's main spy mechanisms. I know less about Hotjar, but it's reasonable to be nervous about any analytics package that is sending data off to a third party.
LOL you're in for a treat if you don't know hotjar and think that GA is problematic!
Hotjar tracks(or used to at least) every mouse movement and click on a site so that you could analyze what happened to your clients or perspective ones.
Yes, I'm aware of that aspect of Hotjar. What I meant was that I don't know what Hotjar does with the collected data (beyond what they offer to the sites that use it).