Your personal data is for sale—that’s not news to anyone