No Steam API access or public data needed. Major game studios include analytics suites (bspyware) which also tend to collect information on what other software you have installed, can harvest data from Steam client side, etc etc.

That data is then sold back to the data brokers.