What does keeping surveillance records of your customers' online activity indefinitely have to do with not treating customers like crap? Offline businesses now

What does keeping surveillance records of your customers' online activity indefinitely have to do with not treating customers like crap? Offline businesses now and always don't and have never had indefinite surveillance records of their customer's behavior. Is it your position that offline businesses are incapable of not treating their customers like crap? Besides which, aggregated data that can't be de-anonymized would be exempted, as described by Maciej Ceglowski. The 90-day limit is only on fine-grained, personally-identifiable behavioral data that isn't explicitly shared (the content of my HN comment should of course be kept forever/until I delete it; but there's no reason to keep the IP address I used, other than aggregate statistics about what cities people access HN from).