It's not that they read the data but that they might sell it to others