The phrase means that someone is sharing or selling their personal data, such as name and contact details, without their knowledge or approval. This can lead to unwanted calls, emails, or messages from strangers who have obtained the person's information illegally.