Data harvesting is a multi-billion dollar industry privacy campaigners believe is far too opaque.