Commercial firms assemble surveillance no agency could lawfully build, and the state buys the output as a service.
Corporate data extraction inverts the market: the advertiser is the customer, and the user supplies the raw material.