>How do you grant a company access to your data but prevent them from storing it?

Outlaw it.

>And how does it apply to data a company generates about me?

You store it on a server you control, then provide access to 3rd parties. This is how https://urbit.org/understanding-urbit/ is setup to work.