There is definitely a difference between PII data of different users being distributed rather randomly across personal devices vs. it being consolidated within a single company which can then proceed to use that data for all sorts of purposes you may or may not have agreed to.