I read privacy / TOS from time to time (and write up notable findings), and believe that most users click without reading -- including most of my lawyer friends

I read privacy / TOS from time to time (and write up notable findings), and believe that most users click without reading -- including most of my lawyer friends whom I've asked I think most policies don't say exactly what they do with the data, even post-GDPR -- like they're not docs of the app's RBAC system They all just say 'your privacy is important to us and we won't share your data with anyone (other than our business partners and for reasons of business)' I think any service you pay for should be obligated by law to reveal what data they have about you, where they got it, and how it factors into a decision (weights / PCA if not precise algorithm).