I don't think it has to be this way. We often run internal reports on usage of certain features, but it's always aggregated, and never looks at the individual data. I feel bad enough looking at a customer's account when they've specifically asked me to do so from a support request.

I would certainly terminate any account with a company that willfully was reading my private data and opening files for the mere sport of it.