When they're actually doing it: "don't care, it was in the privacy policy, of course they do it"
I think it's good to resist at every step.