> I would assume that any data sales have some sort of written agreement for what the data will be used for
Would you also assume that Grindr would have a privacy policy in the TOS which stipulates this as well? So, data buyer lied and thus made Grindr a liar to you, is Grindr the victim?
At what point do we have to say 'whoops, we got hacked/tricked/sloppy and your data is in the hands of bad guys, our bad' is not gonna fly any more. Shut them down. 1 Billion dollar fine next time Home Mart loses all customer files in a hack or SocialFace sells data to people who cause you to lose your livelihood for being gay.