Worst case scenario, Google, FB, and the US Gov have access to that kind of data. Google/FB both say they don't record that, or destroy/change it before giving advertisers access to it.

I see your point, but realistically I don't think any organization could/would ever do this. Outside of NSA vs. Snowden type cases, but I guess that is where it really counts.