This isn’t really a “privacy concern” from a user standpoint. It isn’t user data they’re selling, it’s data they’ve scraped from websites for use in machine learning. It’s more of a legal grey area in the same way that OpenAI is being sued for their use of data in training ChatGPT.