I'm going to assume that is and US private company has your data, they probably already sold it to the government.

so a company harvesting data, and a government doing it are practically the same

lets not forget that the US government also has its data harvesting programs.