Bare in mind that the government requires a warrant to obtain data against you, the barrier in which to get a warrant requires probable cause.

Obtaining data about you from a company only requires a subpoena if the company doesn't cooperate.

BUYING data about you from the same company is completely allowed.

Until we get privacy laws, we are truly fucked.