So, would I give my bank credentials to a company of which business model is to sell its user's data?

I think this sentence is poorly written. I'd replace "of which" with "whose" and "user's" with "users'".