If a business charges nothing for a product then it is not the product. You are.

Sometimes that’s harmless as in they’re wanting you to try their service. Your business for other projects is still the product in that transaction.

Other times it’s your personal data that is the product and they’re wanting to then turn around and monetize that data.

But in both scenarios, you, or something of yours, is the product.