It's Google's data - they collected it from the user, to be used as they see fit subject to the terms of service.

Of course it's the same situation for Facebook. They can prevent others from using their data if they want - that just means that they don't get to use Google's data.

Personally, I don't know if a user's bill of rights is going to be helpful - If you don't like the terms of service, don't give your data.