Most companies would never have to go the lengths insurers go. They'll hire PIs to literally follow claimants around IRL to make sure they really do have a workplace injury. I know this because I worked at an office tasked with reviewing and annotating the videos they recorded.
Well, that was true back in 70's and this true now. If some brick-and-mortar business knew a lot about you (like your bank) -- it still knows a lot about you.
Ad-tech is different by boasting that they do know a lot about you, while in fact they have no clue.
Insurance companies are a great example. The data providers for pharmacy and automotive are another.