Right now, Google only packages and provides (rather than sells outright) data to law enforcement.
Actually, Google doesn't do that either. It does respond to subpeonas, warrants and National Security Letters, when those documents are provided per the requirements of the law and are narrow and specific (i.e. no dragnets). See David Drummond's numerous public statements on this topic.
you cannot seriously claim that Google won't package and sell data to ordinary customers in the future. All it takes is a decree from Larry Page, a change in policy, and it's done.
I agree, that is a valid concern. I don't believe it will happen, certainly not while Page and Brin are in charge. But it's a possibility. I'm skeptical that it could be made retroactive, but I suppose even that is a possibility.
When Larry Ellison buys Google in the next 10 years
Google is Evil because they Built The Dataset. This data is so valuable and comprehensive, and the pioneering of the techniques to do it over and over again, ever more efficiently and cheaply, that people without scruples want it now, will want it in the future, and will eventually control it.
The dataset will be built, regardless. Personally, I'd much rather that it was Google doing it, because Google actually does care about user privacy. In the long term, this isn't a problem with a technological solution, it's going to require a legislative solution. Either that or we'll evolve a society that simply doesn't care about privacy (which isn't an entirely negative idea; read David Brin's "The Transparent Society"). Personally, I'm skeptical of a world that doesn't allow for personal privacy, so I think we need to address it legislatively. I don't know that we need to be quite as draconian about it as some European nations have, but their legal frameworks provide a good starting point.