What does the opt-out process (or its absence) reveal about whether these companies treat privacy as a genuine value or a compliance exercise? - Is opt-out as a privacy framework adequate for the location data broker ecosystem? If not, what would an adequate framework look like?