Earlier quoted context omitted.
Read the Privacy Policy where in the US and EU companies are required by law to say how they're using your data.
So, relying on governments to dictate rules to protect us, in other words.
A strictly libertarian viewpoint would say that no disclosure should be required and you should just choose to avoid any service that doesn't provide full disclosure. After all, it's their right to not provide that information to you and it's your right to not use that service as a result.