Is it legal to collect metadata, if you do not work for a law enforcement agency? Basically, can a US citizen collect information that can risk anyone who uses technology? Because it alarms me when I go to a .com website, and they know everything about me, where I live, what I google, the computer I use, everything about my wifi.