Once again, I'm amazed some HN readers, like yourself, are unfamiliar with the basic tenets of the GDPR. (Hint: A company cannot provide a service on the condition that you provide unnecessary personal data or consent to spying)

If you work in a tech field, there is simply no reason for such ignorance.

The GDPR doesn't impact a lot of companies, if you are acting on behalf of a customer who is the actual data processor for instance.