I would be less concerned about hackers than old-school espionage. That's actually my biggest concern with large-scale data collection in general: if the US gov

I would be less concerned about hackers than old-school espionage. That's actually my biggest concern with large-scale data collection in general: if the US government requires data to be collected, that means mechanisms exist within private enterprise to collect and share the data. Hostile state actors can then use classic espionage tactics (false flag ops, social engineering, romance scams, etc.) to infiltrate those organizations and gather the data themselves because it's already being collected and shared in an aggregated manner. I guarantee there are state intelligence agencies (both US and non-US) with "assets" at Uber with access to this information. This is bread and butter espionage - plant or recruit employees at private companies with access to the information you need.