Your connections can see your email address: http://www.ianharris.com/linkedin-email/
I've always wondered how these things were taking place but never took the time to investigate because of how infrequent the occurrences were. It usually takes a while to unsubscribe from these services via email, so I just mark as SPAM. I just looked and they're still sending stuff, at least some are. I just removed all people I didn't know from shaking their hand from my connections; which includes recruiters that only request invitation to connect to talk about a job opportunity.
I wonder if LinkedIn knows about this sort of Growth Hacking type of SPAM or just doesn't care?