Because, my friend, there are some things that go on to-do lists and some things that do not.
Launching something that collects personal data AND forwards it to a third party API ? Nah mate, that's NOT something where you can justifiably put "Privacy Policy" on your nearest To-Do list.
In addition, if you are potentially dealing with users in Europe who are covered by GDPR, a real Privacy Policy is NOT an option, it is MANDATORY.
I'm tired of software developers, irrespective of size, thinking it's a-ok to to take liberties with the personal information of others and/or not be transparent in what they do with your personal information.
The fact you are a mom 'n' pop shop and not Google does not make it any more ok.
Privacy cannot be an afterthought.