Yeah this is where I think government-regulation would actually be a solid-fit to try and govern some of this manipulative and unfair practices.
There just needs to be a blanket-law where your data is considered every-bit as intellectual property as a piece of copyrighted media and for there to be consent established to sell or give your data to a third-party there needs to be an active exchange of payment, credit or services that is opt-in only, not opt-out from an intentionally obfuscated EULA update email.
Require active opt-in and consent along with a clear set of goods/services/payment, and active simple on-demand revocation with strict timelines, and you could have companies actually properly incentivizing users to sell them their own personal data instead of it just being harvested.
Unfortunately too many libertarian nutjobs out here think that the market here will magically fix all issues.
> too many libertarian nutjobs out here think that the market here will magically fix all issues
I'll see your libertarian market nutjobs and raise you reflexive "regulation will fix it" liberals (I don't really know the right term here, but I guess it's the one that fits most closely with US politics for the last 60+ years). Neither group has much room in its worldview for the simple fact that some people are just jerks and will abuse any system.
Regulation can be done well, but doing so in a way that doesn't just hand the entire segment to the current incumbents is hard and regulatory capture isn't just something market worshipers conjured out of thin air.