From acquiring and managing the vast datasets recording our daily lives to providing analytic software and services on top of that data, much of what we think of as government surveillance is actually performed by private companies, often with far fewer privacy safeguards or cyber protections.