The private data industry: What’s wrong and how to make it right