The entire article's argument of breach of privacy hinges on the claim that "the government of India is selling access to this database to private companies to use and combine with other datasets as they wish". Is there any substantial evidence of this of broad statement?

On the whole, pretty disappointed in this article from Mozilla.