Extension Developers Sell The Data of At Least 6.5 Million Users – And It’s All Completely Legal