Who's got your back when it comes to willingness (or otherwise) to hand over your data to third parties? Some of the results from the EFF's report are surprising