data harvesting risks