how the MAID/IDfV gets into the PII-ID databases?

It seems that part is completely missing. (Or I missed it.)

So for example can/do airlines sell it? Or telecom/utility companies, when you use their app?

I don’t know the answer to this, which is why I didn’t mention it in the post. However, I could speculate that these data-broker companies scrape leaked [hacked and stolen] data from various panels and then match records on their end. kinda OSINT for bad reasons.

Great article, thanks for taking the time to research and write it all up! Definitely learned some new things from it.

Wow, such a beautiful article you have written. Usually, I’m not into reading much but after very long I’ve completed a full article with such interest. Thanks for it !!