Perhaps a difference is that in a phone book, it requires work and is not scalable. On the other hand, if you buy a dataset of personal information, you can gleam tons of information for malicious intents (and scale it).