But I would be worried about what data they collected, and who they might have sold it to, even if they had never yet done anything suspicious or wrong directly

But I would be worried about what data they collected, and who they might have sold it to, even if they had never yet done anything suspicious or wrong directly towards me. Another way to put it is: I’m generally deeply mistrusting of corporate entities collecting my data at all — even very upstanding corporate entities — and believe basic prudence requires me to treat them all with skepticism about my data.