There really ought to be law that forces companies to divulge what personal information they collect from you, what they use it for, and who has access to it. A

There really ought to be law that forces companies to divulge what personal information they collect from you, what they use it for, and who has access to it. And this needs to be in a some type of standardized readable form that is separate from the TOS. If they can't do that, they should not be allowed any access to it.