Comment by jasmer

This needs to be made illegal.

If companies want to collect such personal data it should not be by default, and each clause should have to be independently validated by the customer including what data, how it's used, where stored, for how long, who it's shared with.

Nobody will accept basically so that says something about the asymmetry here.