My current theory is that I gave him my phone number in one of the emails, but every email transaction was through the pseudo-anonymous craigslist email that is generated per listing.

He probably has a contact with that (now bad) email and my (still current) phone number. Which is my phone number on linkedin.

That kind of makes sense, but it still doesn't make me very happy about their methods.