The list of some known data breaches of companies where users underwent KYC in the past:
As you can see, these are all large and well-known companies that, according to some, can be trusted.
Large or small companies, when we send our documents to them, we lose those things on Internet forever except if we can have a time traveling machine to correct our mistakes or past activities.
I don't know all companies and their data breaches in your list that is big but I am not surprised at all. They have lot of Terms in their Terms of Service that are set to protect their companies, not their customers.
Like all those data breaches, did any victim (among their customers) receive compensation from those companies? No, and worse, customer data were breached forever.