The reason given for collecting such data is often, "for your protection" or a variant of, "to verify who you are."

And invariably, I hear about that exact data becoming exposed a few months later. It's extraordinarily frustrating that even when you articulate this viscous cycle to them, they still blindly push forward with the same efforts.