> And while you are right about the privacy policy stating what the data is used for, what is there to prevent companies from changing their privacy policy at a

> And while you are right about the privacy policy stating what the data is used for, what is there to prevent companies from changing their privacy policy at any point in time? And if they change it, are they required to inform you that the privacy policy has changed? For Europeans there is the GDPR. This is also one of the things that AFAIK should be covered by the GDPR (contrary to the cookie banners with opt out that I personally expect will get their punishments soon.)