Yes, they hold the user data (supposedly its all generic, non-personally identifiable, and they dont build user profiles) and then have advertisers pay them to push targeted ads based on that data. This is how the tech companies make boatloads of cash - force advertisers to pay for a subscription to use the user data for targeted ads.