If everyone is selling your personal info, who's buying it all?