It would be wise to assume the goal is to sell it along with the company at a later point to a data broker.
Regarding trust, the must trust the company to not misuse the data now, must trust that future version of the company (and asset acquirers) not to misuse the data, must trust the company to perfectly secure the data against intruders.
(The talk of encryption and anonymization is usually mostly a diversion or misunderstanding.)