This is why you need to be careful with what data you hand to what websites, kids. You might well trust any given website website and the people running it today, but if something goes wrong, and the company goes bankrupt, your data is an asset that belongs to them. And as this article makes clear, the only thing that bankruptcy administrators are allowed to care about it getting the most money back for the creditors. Which means (at the moment, pending a change in the law to improve privacy in cases like this) they're ethically constrained from being picky about what happens to your data – if the highest bidder is a shit who is going to use the data to make everyone involved's life in some way worse, that's just tough for them, because they have to sell to the highest bidder in order to fairly represent the creditor's interests.