Yes -- companies everywhere sell aggregated customer data. This is not the same as individual detailed customer data with your name attached to it.
Facebook is doing the same... they claim to put a double-blind between the two to “maintain your anonymity” ... but I think you know the drill there.
Google and others are able to identify your transactions by getting some information here and some information there.
No one place provides all the information so they can claim to protect your privacy...but they don’t.