Ecosia is still making money (that it uses to plant trees). That means it is selling something and we can reasonnably think that is your data/privacy.

As far as I'm aware, Ecosia does sell ads.