When a company gets overzealous and overreaching in their KYC, make no mistakes. It's either to collect very private (hence very valuable) datas about yourself that can be later resold to god knows who, or they want to get rid of you for whatever reasons.
So in both cases don't bother to answer and move to the next company.
well for obvious reason we have a knowledge about that,selling our data's to third party after gathering from those scammer ICO campaigns back then,when most are not seeking for kyc but after the bounty they will require all of a sudden.
i think what is better to do is just let providing KYC if the transaction is very important and you have no other option but to provide KYC.