What pisses me off is the amount of data they have likely retained just because they require it up front. Instead of deleting the SSN of customers after some sort of initial verification they keep it around just because. It’s not ebmven useful after the account setup.
Especially when the terms and conditions say that they can update the terms and conditions at any time.