The data is aggregated, and you cannot possibly identify a single user from what's been published. I see no issue here.
It reminds me of matt levine's reframing of insider trading where it's not about fairness it's about theft. You're supposed to get secret insights and use them to get an edge. What you can't do is get an edge for yourself with secret insights that your employer got.
So it roughly comes down to "that data is valuable and rightfully belongs to the originating company." Which then makes this a contract diligence type situation.
I don't believe this very strongly. Again it's a contract issue not a moral one. But the metaphor still holds I think.