my point was we're working now to try to figure out the right mechanism — whether it is pro subscriptions or selling hardware, etc. — so we don't end up in a position where we'll need to sell data later.
The point is that there's nothing structurally preventing you from selling data later. Unfortunately that's not a great reassurance, as much as one may want to believe in the project.
To be clear: I think this is an interesting undertaking and you guys are producing good stuff. This structural problem is concerning though, and deserves some serious thought.
E.g., data at rest for private accounts is encrypted with per-account keys based at some level on the user's login, and internally can't be decrypted until the user is signs in next.