It's a nice bit of semantic ju-jitsu to say "they take this data and sell a service that wouldn't be possible without it" isn't the same as "selling this data," isn't it? Especially given that the targeting mechanisms don't have any k-anonymity guarantees, and I'm aware of at least one paper showing information leaks through the ad portal [1]
https://www.ftc.gov/system/files/documents/public_events/122...