There exists marketing data which does not identify individuals.
As these datasets grow (and they only grow), it becomes trivial to tie anonymized profiles to a specific person. They leave off names and it's expected that the final consumer of the data do the "last mile" work of tying it to the name. The easy part.