"For the free options, it's very difficult to know what they're doing and not doing with the data they're collecting," Fitzgerald says, "because the terms in the policy are so vague. It's just not realistic for a consumer to read them and understand what's happening."