“We must realize that giving the people and organizations behind them permission to gather and use our personal information means that we do pay for their services – not in cash but at the cost of our attention, privacy, and security.”