“user data is extensively collected and shared, often without clear disclosure or transparency in privacy policies”