If you do pay for a subscription, how can you be sure you're still not the product? What stops them from double dipping here?
Having said that, you're right to be suspicious of commercial services, even that you pay for. Someone can found a startup with a strong commitment to customer privacy and the best of intentions, but a few acquisitions or near bankruptcies later, those commitments will go out the window.
The small chance that they might go out of their way to not sell premium users data doesn't seem worth much.