The Washington Post recently ran a piece about all the devices Amazon either has developed or acquired that are collecting data about users. You know, us. The potential for abuse underlines what I think ought to be a sacrosanct rule - data belongs to the shopper, and cannot be used, sold or otherwise provided to any entity (commercial or governmental) without the consumer's permission.
