The aviation industry, long a bastion of personal data collection through ticket purchases and loyalty programs, has recently come under scrutiny for a less visible practice: selling passenger data to government agencies.