This is really terrible setup that my personal data is collected by random companies and kept in diverse conditions for unspecified time. This shouldn't be allowed. I should be able to define some of my data as sensitive and it should be held in one place and companies when they need a bit of my data should always get it from that one place with my permission. I should be able to review every access and revoke permission. They shouldn't be legally allowed to even cache it. Banks should keep this kind of stuff. You want to keep a new piece of information on me? Cool submit it to my bank and I can review it and decide if I should let you store it or should it go to the bank or shouldn't it be stored at all.