> But I didn't think they would use the video in a way I didn't personally approve after giving it to them!

This is exactly the sort of thing there should be legislation for. To a somewhat weaker extent than I’d like this is what GDPR and friends covers, the law says that companies must state what data they’re gathering and what purposes they’re gathering it for. If they overreach then they can be fined into oblivion.

In practice this is not as strong as it should be, broadly companies can and do basically go “we’re collecting all your data for whatever purpose we like” and get away with it, but they do at least think carefully about doing so.

There’s no reason we can’t force providers of cloud backed devices to treat your data with respect, rather than thinking of it as residual income they’re leaving on the table if they don’t also sell it to third parties for data mining.

'then they can be fined into oblivion' with capital CAN. Give me an example where this actually happened. (not just a statement that it will be done, but an actual example of a company going under because of the fine)