I might be misremembering, but wasn't there a bit of discussion over whether the "service" they provide can be proven to have done anything?
Like, how does the subscriber know that a) their personal info has (legitimately) been found, b) that the info holder actually has taken action to remove it, or c) that that removal has a tangible benefit?