In my experience at early stages of a company data ACLs are often the last priority for companies. People are rewarded for shipping things that can get a mention in company's next board deck, and "added ACLs to our Postgres" never got a mention in a board deck.

I am sure a half motivated employee at your favorite cab service could see which addresses you frequently commuted to in first few years of that service's existence