But there is no incentive to stay straight and narrow. The laws are weak, penalties are small, all your competitors are doing it (so it becomes a competitive advantage), users are either ignorant or don't care, most of the lawmakers have no clue about privacy...and so on.
What he is doing is a good first step, but the whole culture needs to change.
Users care, but the information asymmetry between seller and producer has never been as big as today. Most consumer do not know what they eat, what they buy, what agreement they sign, or what the things they interact daily with do.
That is a lot of unknowns, each demanding that the consumer is 100% aware or they are responsible for the result. This then leads to apathy, where we care and not care at the same time. A culture that makes people feel that they do not possess the level of skill required to confront daily life is a bad culture, creates depression, and is general bad for society at large.
I'll add that I'm among the elite in my ability to understand and manage my technology (I'm not boasting; almost everyone reading this is the same) and confidentiality is important to me.
But I don't have time to understand and manage the confidentiality of my IT; I have no hope. Even when I try to learn about one product's or service's confidentiality, the information available is often vague, incomplete and subject to change at any time (per their license agreements). I have so many products that I have no hope of keeping up.
And a 20 page small-type contract with dozens of companies. If you say you're getting informed consent from consumers you're a liar; there's no practical way to read and understand all the contracts (that can be updated at will) I have to agree to in order to use gmail, my isp, my cellphone, github, slack, zenefits, docusign, hellosign, groupon, my gym, my bank, my credit cards, direct deposit, yelp, google maps, android, paypal, ebay, hipchat, instacart, amazon, aws, backcountry, kingdom rush, uber, every single app on my phone, and I'm sure more that I can't list off the top of my head.
> If users don't care why does culture need to change?
Users clearly care. The market for privacy-oriented products (e.g., Snapchat), demand for privacy from existing products (recognized and responded to by Facebook and others), and the impact on reputation for companies who violate it (e.g., Uber) all have grown significantly. Surveys of the American public support these observations.
What he is doing is a good first step, but the whole culture needs to change.