If you were to take an api response and save it for testing, but not completely remove all personal information.

Easier than you'd think, or at least I could see it happening.