No amount of regulation would help if the users themselves don’t value their data. As far as they are concerned, these products are free. They might be wrong, but that’s irrelevant here, the relevant part is that to them their data is worthless so they don’t care. We need more education on this, not regulation. Or rather we need both.