> Companies can advertise all they want, just not collect personal information without their consent.

Honest question, what's an acceptable way to get consent?

Companies need the user to accept their terms before using their services but I presume that's not sufficient/acceptable way since its arguably too long/complicated for a user etc. App specific permissions on your phone can be restricted e.g. turn off location data access for an app, but users generally create accounts and provide more detailed information, so that's likely not sufficient? A prompt on every bit of data collected seems like a bad user experience e.g. notifying the user on every http request that the ip is collected/sent to the server which can provide their rough geo location.

What's an acceptable way to do this?