The Kobo privacy policy spells out what they collect, how they use it, etc.
http://www.kobobooks.com/privacypolicy
People with concerns should compare that document with equivalent ones by what they consider to be trusted providers. I'm betting that the differences are either minimal or non-existent.