Are companies tracking us, or merely “observing” us?