Because it's not illegal. Most data privacy laws just require that user can see data collected about them and prevent sale of said data in optout fashion.

There are rarely laws around preventing collection of said data or using said data for some new service.