Can you give an example of a company storing and processing data without telling it in the service policies?
And you have said that ALL the behavioral data collection must be forbidden. Even if the user agrees with that?
By the way, spying is already illegal. If you know about that behavior you can sue those companies