“This information is all collected and stored by a third party,” Lynch says, “and once the third party has the data, as the user you don’t have any control over it.”