Credit card providers most certainly sell your data. Data brokers have detailed profiles on everyone. They don't anonymize anything when their whole business is selling names and addresses of hyper-specific demographics.
Source? You can read my comment history - I’ve worked extensively in this exact industry. I literally built bespoke audience segments directly with visa and oracle, which have strict rules including the number of people in an audience and the type of purchase/retailers included. It’s not hyper-targeted, unless you consider something like “everyone who bought a flight flying through LAX in the past 3 months using their Visa card” as such. That segment is probably around 1MM ids, which gets scaled up with machine learning to 5MM similar people (the minimum size for any visa audience segment). 5MM people is about 35MM IDs (cookies, device ids, etc).
They 100% do not sell names, addresses, or any personally identifiable information because that’s super illegal.