I think it's a rather common dysphemism used in context of targeted advertising. Monetizing user data—while not actually selling the data (in the literal sense of the term)—is considered by many to constitute having their data sold, albeit with a layer of indirection.

My understanding is that while this is certainly superior to your data being actually sold, privacy is nonetheless adversely affected in fairly significant ways.