Most of the privacy-violating industry works the same way, they're just better at keeping it out of the news. The NSA, the FBI, all 3 major credit-reporting bureaus, any security company with CCTVs, Google, ad-trackers, 23andMe, anyone who buys or sells your mailing address - they all keep data about you whether or not you have chosen to allow them or have any business relationship with you at all.