Firms are buying, sharing your online info. What can you do about it?