Companies often collect and use data without adequately informing users. They may use vague or complex language in their privacy policies, making it difficult for users to understand what data is being collected and how it’s being used.