I'm reasonably comfortable with a company keeping records of its interactions with me, as long as they're taking proper precautions to keep it secure.

Where I draw the line is when they start sharing it with third parties, especially without my consent.