You don't even have to worry about the government (it seems unlikely that most of us will see a "10min showers only" law anytime soon), but it's usually private companies collecting and selling the data and they're happy to use that data against you in any way that they can.