Maybe instead of "investigating" data companies, just realize that data companies' sole purpose is to profit off violating user's privacy? I mean it says it right there in the name, no investigation required. If a company uses data for anything else than providing legitimate service to its user, it should be kicked off the platform.
In this case, it sounds like CH is using publicly available data only. That doesn't sound like a violation of user privacy, unless Facebook is misleading users about what portions of their information are publicly available.
