This is just a profit calculation though. Do they earn more by keeping and mining this information or by selling it, or both? For now they might not be selling it (I don't know), but that can change before you say "but GDPR...".