Extend user education testcase based on MSTG‑ARCH‑12

[commjoen]

MSTG‑ARCH‑12: The app should comply with privacy laws and regulations.
Furthermore, based on this, the following actions need to be taken:

• Extend user education section
• Extend explanation on that this includes not having location data in images and tracking, unless that is consented by the user (have a requirement on not leaking PII through metadata: whether statistics, images, etc. owasp-masvs#298). Next, make sure we show how to remove exif data.
• Extend explanation on that tracking info should be removed timely as well, this includes location-databases,images with location info, etc. Discuss: should we say something about tracking info stored on a device? or about the duration sensitive information is stored on a device? owasp-masvs#281

[cpholguera]

Related to #1988

[cpholguera]

MASVS-ARCH removed for MASVS 2.0

MASVS-STORAGE-5 takes care of this.