[nokya]

Indeed. This concept is sadly too often misunderstood. Many users feel they get everything when they ask for their data, but these data sets are usually restricted in two ways:

1. You only get the data you provided to the service, not the data they derived from your use of the service. Incidentally, this second data set can be as much critical when shared to third parties.

2. You only get the data they kept about you, not the data that resulted from the various transfers to their partner companies and which was thereafter correlated with other databases.

These two sets of data are about the user, but the user never gets to see it, unless it is explicitly requested to the partner companies.

Thanks Trojan horse GDPR.