We know companies are collecting and sharing our data. Is there anything we can do about it?