A 2017 law allows ISPs to collect and sell customers' web browsing data to advertising companies. You can get around this by using a virtual private network.