Do note: Facebook doesn't sell data directly, they use it to sell ads. They actually buy data so that they can get more insights than what they get from only their own direct tracking.
There are probably plenty of ways you could word statements along these lines that make them technically correct. I've got a two-word response to all of them: Cambridge Analytica.
An academic from Cambridge made an app on the FB platform. That gave him access to data which he then sold for commercial purposes. When FB found out, they sent a legal notice to delete this data and cease using it.
Like gdpr on steroids? I think this would ruin a lot of companies and make a lot of really interesting and useful services no longer possible... but I'm rather curious what it would really mean. I've never seen it proposed by someone who actually recognized what it would mean, though.
At the very least, there's been no societal consensus that we want the trade-offs that come from allowing every click, view, email, and contact to be scanned and used for profit in whatever ways companies want. It happened by pure assertion: the companies just did it and did all they could to avoid even letting people actually know so they wouldn't have to ask.
Maybe we overall would rather lose all the benefits in order to block the harms and dangers.
I'd much rather have the status quo (and stronger) around privacy regulations for medical records than live in a world without that but then be one of a few people who forgo use of common medical facilitaties over personal privacy objections.