They will use it for nefarious but "legal" purposes - however - they have decades of experience handling such data and keeping it "safe" from "illegal" purposes.