Ahh but the users of the VPNs apps have no idea that Sensor Tower is behind the app and collecting and selling their data.
It might be in the terms of service and briefly shown to them, but in the literal, practical sense, the users actually do not know! It is without their knowledge.