You agreed to terms of service that gave the data to them. That would be a good canary case though, have a bank provide the same terms of service for their physical lock boxes, and see if that gets struck down, despite the TOS. If so, you have a case to annul the digital TOS as wel.