This really isn't a just for Twitter; this is the danger of selling any application with a large install-base. Doesn't really matter if it's a social network app, borderline-useless mobile app, Facebook App (I'm looking at you, Cambridge Analytica), chrome extension, or pypi/npm module, all of these things are capable of collecting extremely fine-grained user detail, and selling it off.
It doesn't matter if the current owners don't/won't do it, there is essentially nothing that prevents someone else from buying it up, and doing nefarious things with the existing install base.
And as far as "Terms of Service" go, there is essentially nothing to prevent a future owner from updating the Terms of Service, and then doing the above.
It doesn't matter if the current owners don't/won't do it, there is essentially nothing that prevents someone else from buying it up, and doing nefarious things with the existing install base.
And as far as "Terms of Service" go, there is essentially nothing to prevent a future owner from updating the Terms of Service, and then doing the above.