We need a new ISO certification that protects against this unnecessary data sharing.