Ask HN: Who buys data?

I've heard many startups brush off monetization questions with "We can sell user data". But who out there actually buys user data? Are there are any exchanges where transactions of user data happens?