Require a strictly unconditional opt-in you can revoke at any time and the problem of data collection solves itself. None of these business models would work if they required meaningful consent. The missunderstanding about who is allowed to use my data is at the core of this problem. We tend to talk a lot of the lawless west that (was) the internet, but we somehow fail to mention an industry who has exploited missing regulations on private data. Just because they werent banned from exploiting this until now, doesnt mean it should continue any longer.