Comment by Jensson

GDPR solves exactly this, they are legally not allowed to sell this data in EU without explicit consent from you describing who to sell it to.