Better to shut down than sell people's data without consent. Better still to seek consent, but between what they're actually doing and simply shutting down and deleting customer data, the latter would be preferable.