The "AI analytics" companies are all communicating expressly their intent when they purchase the data at the outset. This makes it legal.

Full disclosure, I'm a privacy advocate and believe this sort of selling of customer data should not even be allowed. That said, what the companies you allude to do is totally legal by law, and significantly different in practice than taking data without informing anyone of your intent.

I guess the short answer to your question is that this is the United States. Everything is legal here, provided you do the paperwork first.