First they slurp all the data they can - legally or otherwise. Then stick it on a server so world + dog can hack it.
Next, they give a sickly grin and promise it won't happen again.
Rinse and repeat. And we - the general public - believe them. Right now the security services and general public are in an abusive relationship.