They can if while connected to them you open a browser within that session that routes traffic through them, (ex: vpn setup). Some malicious companies have users install software on their pc and will ask them to "allow them access" if you need help. A completely unnecessary setup (if spying on...