It's not really plausible that they would hire people to secretly gather it from you. Maybe they just make it a requirement for getting the insurance at all, that seems cleaner and more scalable.