The current TOS clearly states that they do not sell user data. Until that TOS is changed they have no right to sell their user data to advertisers. Once it does change, which I'm sure will be soon, the question will be whether or not they have the right to sell user data that was collected before the TOS was changed.