This is not intellectually rigorous. In locations where "it is illegal for companies to do a credit check for employment" they cannot perform one. Because they cannot perform one, they cannot be "using it [to] sell your data to some shitservice". More specific to my anecdote, I have always been in states where it was allowed to be used for employment purposes. But even if I wasn't, your speculative scenario is not internally consistent to itself.