I want to emphasize "unknowingly" part. Once data is uploaded to an entity, there's no guarantee they'll manage is properly.

User agreements change constantly, engineers make mistake, firms get liquidated and data might get sold, and most importantly, as a former employee of social media firms, what the firms say about the user privacy publicly is very different inside.