Opt in only
That's the first requirement and even then do you believe them?
If you later demand to opt out, what removes your data and what guarantees do you have it was removed.
Tin foil hat? Maybe, but the data is far too tempting for ne'er-do-wells to ignore.