As long as people consciously publish information online on Steemit or Reddit for public use and employees of business entity sign paperwork to have their business-related communication traffic shared with business entity then using this information does not seem to be "spying". Of course, the legal regulations on privacy and personal data protection like GDPR have to be followed, like it or not.