“The dominant business model of Web 2.0 big tech companies has been to share user data with third parties by default, rather than by explicit user choice.”