I think KYC is an arbitrary measure that ICOs use to avoid anonymity to some extent, or at least that's what most of them claim to use to avoid scams, but they can also use it to sell your identity, at the end of the day you don't really know, so they can use that information, since many ICOs end up being false and would end up keeping your identity.