I don't think you can simply "sell" customer information in the financial industry. It's a heavily regulated industry. RH can use information from the card to cross-sell its loans, if customers allow marketing communication. But I don't think they can just profit from allowing a 3rd-party access to that data. I never heard of a card issuer monetize their customer data that way. If you have an example, please do share.