How exactly would you suggest one looks for "evidence of risk" in this scenario? We already don't have any clear visibility into what companies do with our days

How exactly would you suggest one looks for "evidence of risk" in this scenario? We already don't have any clear visibility into what companies do with our days (which is kind of the whole reason everyone is upset about the changes to the privacy policy that everyone is discussing here in the first place), so if a new company comes in and also starts doing _something_ with data that we also have no visibility into, we should just assume that they aren't doing anything sketchy because they didn't happen to say anything incriminating? What would you expect a company that _is_ doing something sketchy to say in this scenario? You don't think that's a company might just lie about something that they know no one can disprove? Your "no evidence of risk" is my "no evidence of a lack of risk", and at the end of the day, I don't see any reason to blindly trust any company on their claims of being benevolent, let anyone one operating in such a historically sketchy one like adtech.