Google never sold user data until the DoubleClick acquisition, from what I understand