Forget about anonymous data; sometimes PII is not sold, it's just given away by staff who don't know better. See my comment here for my own experience: https://news.ycombinator.com/item?id=17183682