[JohnFen]

If data is collected about you without your consent, that collection is itself harm, because your rights and intent are being actively bypassed.

That's plenty harm enough all by itself.