Often "legacy" institutions appeal to their age to tell us how they should be trusted with data. Ironically, they are the people I least want to have my data, since they seem completely incompetent in using it for anything valuable and instead just try to use it to grasp more power.

I'd rather some scrappy startup have all my data than my bank or my insurance provider. At least the startup has limited power. My bank can ruin my life by giving my a shit credit score because their model told them to, and by appealing to their trusted societal position, they'll convince themselves that it was the right thing to do.