Do you think people stealing personal information and selling to advertisers should still be legal?

Yes, the user did check the "I agree to the Terms and Conditions" so they did technically consent to their information being sold.

No, the user might've not had looked at the Terms and Conditions. Plus, it's just plain creepy.