add a privacy section

[klarose]

This adds a privacy section which discusses the implications of the User Equipment identity.

I'm open to suggestions for more content here. Some thoughts:

• State that may not contain the identity, but can be mapped to from it?
• Logging?

Fixes #109