If you engage in a business transaction with the bank you should have the expectation that the information will only be used to serve you and not help banks make money from marketing.
If they answer yes, then ask, 'How are you making sure that my information is being protected?' If you don't like the answer, take your business to another financial institution.