• In the US. In the EU that is illegal. That is why they offer voluntary bonus programs, where the data collection is explicitly allowed by the customer. Unlike facebook it is not necessary for the servicevthough and also they dont sell the data to third parties.