What are some ways that companies could assure users exactly which of their data is being collected and what it is being used for?

What are some ways that companies could assure users exactly which of their data is being collected and what it is being used for?