In Europe it's a big no, but Israel is not politically in Europe, and yes it is a very common and widely accepted practice from companies there.

It started with the Download Valley where companies would monetize search ( https://en.wikipedia.org/wiki/Download_Valley ) and siphon personal data.

The same with location information, plenty of shady SDKs offer to pay you if you leak location of your users.

Again, mostly based in Israel, but sometimes New York.