I am gonna guess they have their own ad setup. So they collect the data, setup profiles and whatnot. Then an advertiser can come and pay to use their system for targeted ads. Now does that count as “selling your data”? Not technically I guess. Google does exactly the same thing tho, right? I fail to see how they differ in any way. I suppose you can HOPE that apple cares about its reputation enough to handle your data carefully, but that is about it. Hopes and prayers.