Are they arbitraging risk assessments or are they just selling your personal information? The former would be interesting but not sustainable once underwriters

Are they arbitraging risk assessments or are they just selling your personal information? The former would be interesting but not sustainable once underwriters catch on. The latter would seemingly only work for very small, almost inconsequential policies.