Again, it's unclear how exactly that's against the law. Provided that the data was obtained legally, of course.

Most of the larger commercial entities seem to be doing the work themselves and being quite upfront about the entire thing.