Obviously Microsoft isn't going to sell their profile of you to petty thieves. But they probably will sell it to at-scale-grifters looking for marks or fascists looking for dissidents.