Online privacy needs to be more rigorous. Private firms have no right to track anyone.