I'm not trying to be flippant, but what is to stop some company from simply utilizing a Terms of Service that allows them to do whatever they want with the data? I often see people chiming in that consumers "agreed" to all of this, even though the vast majority of people never read through the ToS or privacy policy at all.