Tech companies shouldn’t be able to do surveillance.