“An Internet service provider reasonably needs to know your name and address. But it's hard to imagine why a provider would need to collect your Internet browsing habits other than to sell your data.”