> Surely this would be illegal? Personal data without consent?

I'm not trying to be mean here, but have you been frozen in ice for the last 20 years? This is effectively the tech industry's raison d'etre.