I've been reading a lot of comments about this, and something that always comes up is the question "why shouldn't people be able to sell their data?"<p>I have two objections to that. First, they're almost certainly not making that deal from an informed position. Security and privacy are very complicated matters, and most people won't even realize to ask questions about data retention, aggregation, sharing, differential privacy, etc. Instead, they'll substitute in an easier more salient question (<a href="https://en.wikipedia.org/wiki/Attribute_substitution" rel="nofollow">https://en.wikipedia.org/wiki/Attribute_substitution</a>), like "Is $20 a month something I want?"<p>The second issue is that MITMing all network traffic on a phone will necessary scoop up the user's credentials, as well as private messages and metadata from that user's friends and family. It's naive to think about privacy as something an individual can accomplish. When you sell data from your networked social device (i.e., your phone), you're also selling out all your friends and family. Given all that really hot data, what incentives are there for the data collector to act responsibly and protect that data? The reality is pretty much none.