Who Has My Data and What Are They Doing with It?