Comment by nightpool

One small piece of nuance here is that a lot of the times they're not selling your email address, they're hashing it and using it as an identifier for targeting on other sites (so that two sites that both have your email address can coordinate to sell you ads, but sites that don't already have your email address don't learn anything new).