This is true lots of scam or fake ICOs implement KYC just to gather the information about you just to gain more info about you and use it for their purposes in the future. So you should beware where you upload your information. The KYC is usually requested if the project succeeded already then yes but before that it is pointless. For example my last search DexAge ICO for the decentralized p2p escrow trading exchange is considered to implement KYC too but not before they finish their project and go out on the market so that looks right as it should be.
Yup buddy. It happened to me some time ago I don't even remember the name of the ICO but it's got scammed and shortly I was also receiving emails from different project which I din't even sign for. So as I figured it out this all information when filling up KYC can be used later to attract to a new project and probably got scammed again. Or even use your information to make a fake CEO of the project. Who knows what they might do with it. I also following DexAge ICO and yeah they do not acquire it during the ICO which is right. So people should pay a notice to this - no KYC before the project is out and running.