When Corporations Violate Privacy, They Do Concrete Harm