Thank you - that's truly horrifying. I put in a request to get my file from them, but based on their security questions they have my whole public profile. Whether they can map it to social media accounts and purchases isn't clear yet.
Edit: They have pinky-sworn to email me my data some time in the next 45 days.
I'm not sure about the social media activity either but as a data broker they're selling the consumer activity. Anyone else who happens to have your social activity, phone, zip and email is free to buy it from them and link it together. Problem is you fork over all those identifiers for KYC whenever you sign up for something and buried in the T&C will be a clause allowing them to share your data for business activities.
Edit: They have pinky-sworn to email me my data some time in the next 45 days.