"Selling people's data" is a very abstract concept. As technologists, we are able to imagine concrete implications. Everyone else brushes it off as they've "got nothing to hide" until hit with the actual repercussions.