Are there any legal ways of protecting yourself from this sort of data collection?