The Patriot Act is about to be reauthorized, but we still don’t know basic facts about how our web browsing habits are being collected.