Shouldn't "hacking back" be extended to companies that collect user's data without obtaining their consent properly, without respecting privacy and local custom

Shouldn't "hacking back" be extended to companies that collect user's data without obtaining their consent properly, without respecting privacy and local customs like Google, Cambridge Analytics, or Facebook do?