If anything private sector driven surveillance can be creepier-- it's a total "wild west" without even the pretense of public oversight and virtually no regulation. Only the most insanely creepy things like capturing video from your house and using it for analytics might run afoul of the law, and even there you'd have to prove it and prove harm and it would likely be civil not criminal. The NSA and CIA at least technically answer to the public and are subject to regulations about what they can do with the data.

To quote Steve Rambam from HOPE: "If you're angry about what the NSA is doing, you should be furious about what Google and Facebook are doing."

IMHO the Amazon Echo and similar beyond-Orwellian devices will someday be looked back upon with the same amount of "what were they thinking?!!?!" as stuff like: https://en.wikipedia.org/wiki/Demon_core

To continue with the nuclear analogy: I've been predicting a privacy/security "Chernobyl" event related to mobile and/or IoT for many years now. It'll be something like a corporate whistleblower revealing that a company has been running all ambient sound from all customers' houses through speech to text for over a year, then putting it all in a database and selling access more or less indiscriminately. Customers, it will come out, will include organized crime, foreign governments, etc., and some of the data will turn out to be from the homes of US Government Secret and Top Secret clearance employees, CXO level corporate personnel, police, etc. Only a matter of time. I'm counting the days.