I think you're missing the point. Facebook doesn't have to hand out a text file with your name and a list of all your friends for it to be considered "selling your data".
It's considered "selling your data" when you go to an unrelated site and that site gives you customized content based on information you gave to Facebook.
That does not happen either; user data is not given to third parties. I do not work at Facebook; however, this has been clearly and repeatedly stated by them (including, I believe, in legal filings).
I think you're missing the point. Facebook doesn't have to hand out a text file with your name and a list of all your friends for it to be considered "selling your data".
It's considered "selling your data" when you go to an unrelated site and that site gives you customized content based on information you gave to Facebook.