Turns out it's Apple itself that "sells" my data. Most likely because of I have Siri enabled with location access to "frequent places" or "important locations"... I'm quite disappointed. I thought this data wasn't shared with third parties, but as usual I didn't read the TOS/Privacy word by word...