Both these tweets can be addressed by adopting a UPI enabled wallet.

Using Cheq, you can keep your bank account plus mobile number secret. Everyday small value transactions can also be consolidated separately from your main bank account.

I don't think anyone is selling data in the UPI ecosystem but if they are, that's a very short-sighted strategy to make money for sure.