While that&#x27;s true, and perhaps even needs to be &quot;the default&quot;, there really needs to be a way to say &quot;Hey, I&#x27;m concerned, and am prepared to take responsibility for my own access credentials. I demand you categorically _do not_ disclose <i>any</i> of my personal information to anyone without a warrant or court order.&quot; And for that sort of demand to have appropriate legal teeth to ensure people collecting that data are sufficiently motivated to act properly on it.