They are clearly at fault, but at this point customers need to be more cognizant of the fine print. I recently did a Google takeout of my data and found for most services they have no tracking on me after March, which is around the time I started actively hunting for options to turn off anything which reveals private information. Taking steps to learn how to reduce my online footprint also helped