Your most intimate data is being sold to the highest bidder – who might be a spy