Point B requires trust, which users shouldn't give to developers who collect as much analytics as possible. If you can't trust a company to respect a reasonable expectation of privacy then why would you expect them to not profit off of it? It's just all very quiet and down in the Ts & Cs, but that doesn't mean it isn't the logical conclusion if given exposure.