So if it's not illegal, in your book, a company should just do it?

Let's say Saudi Arabia approaches Facebook and wants access to profile and location data to help round up all the gay people in the country to be executed. Maybe they even offer to pay a lot of money, so it'll be profitable.

That's fine with you? Those local laws, amirite?