You don't need to read a 200-page ToS or live in a libertarian utopia to know what data they have access to and to assume they'll abuse it. A few quick examples

You don't need to read a 200-page ToS or live in a libertarian utopia to know what data they have access to and to assume they'll abuse it. A few quick examples: Don't use Facebook - it's basically a tool for turning any little aspect of your social network into ad revenue. Communicate directly with people you actually value and fuck the rest of 'em. Don't use Dropbox, their employees have access to all your data, so does someone who breaks in. Encrypt your data before it hits the internet or forget about it. Don't use a paid VPN service for anonymity, they have your billing data and connecting IP directly and you have no way to verify if they "don't log". Don't trust them. Use an anonymity network which tries its damnedest using technical means to mask those sorts of details. If you give someone else your data, think not what they can legally do with it, but what they can technically do with it. Write laws all you want, Facebook will still abuse your data to the maximum, attackers will still get access to far too much data, it doesn't help. Personal responsibility is the final solution to the problem. When you give someone data, always assume the worst. Computers have an amusing tendency to tend to make technical feasibility into reality.