Good old fashioned junk mail, background check services, and consumer research?
Even if they keep their literal word and don't sell your actual history, and you use SSL so they can't see specific content, they can certainly make money by identifying traffic profiles by domains/times/frequencies/etc.
Even if they keep their literal word and don't sell your actual history, and you use SSL so they can't see specific content, they can certainly make money by identifying traffic profiles by domains/times/frequencies/etc.