Certainly it's better to stick with the factual conspiracies like NSA's PRISM program: https://en.wikipedia.org/wiki/PRISM
or Room 641A: https://en.wikipedia.org/wiki/Room_641A
If they can install hardware in companies and run data collection programs, I don't see why wouldn't they be directing the data collection policies too.