would it be more accurate if i said their personal information is whored out to the highest bidder?

No. For the same grammatical reasons and for the more important fact that they don't sell data or information, they sell ad placement that get populated with relevant ads determined by analysing said data. Advertisers don't buy the data, they aren't exposed to it, they are exposed to dashboards, aggregates, and abstractions, e.g "I want this product advertised to 18-35 year old males" then don't get to personally know their demographic.

guys in brothels don't get to personally know their whore, they say "i want a red head with big boobs" and pay the cash.

i still say the analogy is apt.