Of course.

Personally I have given up on that. I try to either use false information when they don't need the real data or throwaway" emails and SEPA and one time credit card numbers for banking stuff.

I don't trust any company with my data ever, so I'm constantly paranoid in a way.