Companies may collect more data than they need, or collect data without a specific purpose in mind. This can create unnecessary privacy risks for users, as well as increase the risk of data breaches or misuse.