One broad thing I can think of is that there aren't strict GDPR requirements in the United States. Might be the case the value of user data alone might make the sale worth it, but I am speculating here.