It doesn't matter how they are using the data, what matters is how they can use the data. We shouldn't trust that they will always do the right thing for citizens' privacy.