> Right, but where do they get their data?

You give it to them when you sign up for that stupid rewards card.