Ethical products and services cannot rely on “checking a box” for the use of customer data because such blanket consent ignores difficult questions about user expectations and the unique risks that data exposure might cause for one individual or group over another.