Google appears to be overlooking their explicit ban on this.
If your app handles personal and sensitive user data, then you must ... Not sell personal and sensitive user data.
The rule also applies to third-party code. If you include third party code (for example, an SDK) in your app, you must ensure that the third party code used in your app, and that third party's practices with respect to user data from your app, are compliant with Google Play Developer Program policies... For example, you must ensure that your SDK providers do not sell personal and sensitive user data from your app.
https://support.google.com/googleplay/android-developer/answ...Isn't this abuse what we are supposed to be paying their 15% Play Store tax to stop?