Just as Facebook and Google could openly start selling all the information they have collected at any time? I mean, it goes against the business model they ope

Just as Facebook and Google could openly start selling all the information they have collected at any time? I mean, it goes against the business model they operate under, but they could, right?