Ahhh, but they don't sell user data on, they sell aggregated and personalised targeting info.
Or, that's the line they'd take to avoid becoming liable, anyway. They're not selling *your* data, just data that happens to relate to you (and some other people)