The frustrating part is that since so many companies collect PII under the guise of security (and then use it for advertising) it's harder to tell if this is a legal scam or illegal scam.

>if this is a legal scam or illegal scam.

the fact this is something to be distinguished says a lot about where we are now and none of what it says is good