The basic idea is this: When you give your personal information to an online company in order to get a service, that company should have a duty to exercise loyalty and care in how it uses that information. Sounds good, right? https://www.eff.org/deeplinks/2018/10/information-fiduciaries-must-protect-your-data-privacy