Suppose a shopping app collects my email ID with my consent, stating it will be used only for sending order updates. However, later, the app starts using my email ID to send promotional advertisements or share it with third-party advertisers without my permission.