>There is nothing that I’m aware of that says banks or digital service providers need to collect any more information than is necessary to provide the service t

>There is nothing that I’m aware of that says banks or digital service providers need to collect any more information than is necessary to provide the service they offer And what about all the information that is necessary to provide the service they offer, like the real-time location of everyone's cell phone and who calls who when and for how long or all the DNS requests? Sure, a company doesn't have to retain this information and market it for resale, but providing these sorts of services necessarily entails access to a lot of information that most people would consider private, but which the third party doctrine says isn't.