The consequence to the user can be pretty much the same, their data shared and used without their consent.

Selling data requires having it.

Having it enables getting hacked.

Not selling data enables not having it in the first place, which eliminates the entire failure class of "getting hacked".

NB, and not specific to you, but I'm increasingly cognizant of the general inability (or unwillingness) of people to follow chains of reasoning forward, or in this case and more readily, backwards, to identify likely consequences and/or causal / contributory mechanisms, in even only modestly complex cases.

It gives me a great deal of concern over the creation of an even only modestly complex information infrastructure.