Ask HN: What can be done about vague privacy policies?

I just was reading the privacy policy for the new global system my gym is migrating everyone onto. It all seemed fine, but there was one line like, 'also we can use your information in ways that are in our interests ( or third parties can) if it's not not in your interests" which basically leaves the door open for anything they decide to do. What is the point of having any other clauses? What can be done about this madness.