

Depends on what threat you’re protecting against IMHO.
If you’re trying to be anonymous, connecting to your home IP first is a dead giveaway to who you are. Both your home ISP and whichever ISP you’re connnected to will know.
Only easy way to maintain some anonymity right now would be to use Tailscale’s Mullvad integration……Tailscale to connect your servers, Mullvad for anonymize/country changing.
Other way might be to ONLY use Tailscale/Mullvad, and set up an alternative auth front door to your own network. Complicated and doesn’t work as nicely tho.

Wouldn’t be the restaurant harvesting. They likely only got the app out of convenience and sold to them as a cost savings; the actual ordering/menu company probably has all the customer data sharing agreements that the restaurant owner didn’t read or didn’t care enough to understand. Those companies are the ones who want your data, the restaurant doesn’t care.