Do you have a list of details which we must know about our providers before conducting any business? If not, let me give you one,

1. Legal name
2. Tax ID/SSN/PAN
3. Registered address
4. Details of grievance redressal officer and escalation matrix

Can you think of aything else? Now lets assume the company sells off your data to a third party. What extra will you do apart from going to the consumer protection bureau? Let's be practical!