“Do You Really Need My Social Security Number?” Data Collection Practices in the Digital Age