Seems very similar to me.
- collected by FB
- without even the pretense of consent
- sold to the highest bidder
An unsuspecting person (Alice) ends up with a shadow FB profile because someone (Bob) who actually created an account (therefore having an opportunity to read terms of service) decided to take a photo of Alice and send it to Facebook.
An unsuspecting person (Alice) ends up with Subaru having an audio recording of what they said because someone (Bob) who actually bought the car (therefore having an opportunity to read terms of service) decided to invite Alice into the car.
In both cases, the company receiving Alice's information would likely say that Alice should take issue with Bob's behavior, not the company's behavior, if they don't like the situation.
Whether it’s legal or not is menaingless given the power imbalance.
You can write anything you want, but no that doesn’t make it a valid contract.