Honest answer: I don’t think most people care about that. I think their concern is exactly as you stated. Personal identifiable information is being shared like it means nothing. Details specifically about you and your child. Your address and other info.

This can all be corroborated with other data from other data sets to make it uncomfortably real. And it happens all the time. Look at the number of spam emails you get with your information included. You didn’t give that info to them. So who did?

Edit: additionally it’s not that the company gathered just that data either. They’re also selling it or in some cases giving it out. I wouldn’t care if it were just that company but they sell that information to people who sell it to anyone. Now you’re getting phone calls from spam numbers from a company you didn’t want your details shared with.