A 9-digit payout is a lot of incentive. I imagine the pennies they get from selling your data surreptitiously just is not worth the hassle. It costs way less than $220M to write up a privacy policy and provide working toggles in the user interface. And they may even generate goodwill.