Thank you - that's truly horrifying. I put in a request to get my file from them, but based on their security questions they have my whole public profile. Whether they can map it to social media accounts and purchases isn't clear yet.
Edit: They have pinky-sworn to email me my data some time in the next 45 days.