I suppose it doesn't make a material difference if it's enforceable, since if you have personal data on their platform right now you have to assume it's been ac

I suppose it doesn't make a material difference if it's enforceable, since if you have personal data on their platform right now you have to assume it's been accessed or consumed in some form. They obviously had an inent to start using the data for something, and given what I know about tech businesses, I wouldn't assume they only started once the ToS change was made. I would consider my data compromised.