They did, but those companies who don't do it today are doomed to fail because the other companies that do will sell more, including both products and users' data.
Well... if the company's main activity is refining oil, cultivating corn, or trawler fishing, then maybe it doesn't need to buy and sell user's data, because, you know, there aren't any...
Also, there are companies like FairPhone and System76 that (probably) don't buy and sell user's data. But they aren't exactly thriving.
Those are not investments because you do it out of obligation and necessity.
You are not allowed to work if you don’t have a bank account.
And also you loose value from these. Cash loose value thanks to inflation money spent on nsa.
Banks not only dont pay you for the money you have in the bank but also charge you a lot for a digital transaction they spy and use.