Anyone can sell your data to anyone else. A relay is somebody else's property, not yours. This is true for ALL servers, all websites, all apps. If a server doesn't explicitly promise you to not sell your data on their terms and conditions for use, it's likely that they are selling it.
Discussion
So nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg has many relays added to the app. So any of those relays could be selling my data. Is that correct?