This sounds like paranoid cherry picking, at best. Nearly all of these "worrying issues" are the default behavior of every mobile Android and iOS device on the market.

Specifically, the sync and Cortana portions are complete non-issues. For example, you need to provide all of that information for a service like Cortana, or Google Now, or Siri to even function properly. And you will find nearly identical verbiage in the Android and iOS user agreements, allowing them to access, transfer, and use your data.

Yet, I don't see any of this righteous indignation about the non-Microsoft services.