So I don't see this as about whether the provider has "good" or "bad" intentions; I see this as about whether the provider asks me for permission/consent before using my data. It's certainly theoretically possible that a provider is good at talking the talk and also being actively malicious, by asking for permission and then ignoring it or something, but that's not the problem I have or the article's author has with Google.