They could, but there is a subtle difference between your ISP (and the spooks) sniffing your network traffic to extract your usage data, and the company you are explicitly targeting and asking them for info.
Yet again however, since this is free them YOU are the product being sold.