If you have zero confidence that the data is only visible on the site visited, then your only option is to prevent the user's data ever being sent to that site.
If no site owner is trustworthy, then people have to stop using software and hardware that leaks unnecessary data.