Seeing as how the former option is the current precedent in software, they are probably going to sell your data.
In my opinion, this is totally "acceptable," and even preferable: my personal information is abundant, and is infinitely and trivially "replicable." My money is incredibly scarce and finite. (And being righteously indignant is too expensive.)
Edit: Also, I agree with the general sentiment that this should be a native app, not this wrappered pseudo-web app thing.