For me, this hasn’t been troubling at all. A few secure emails on permission to withhold my information, and that’s it. The biggest surprise came from a company I had never heard of asking this. Hell to the no with that, so generally a positive experience.
It seems like just getting ride of data when you no longer need it would be a simple solution but I guess that cuts into profits.