Let’s say you use a “plus” formatted email, I.e foo+github@gmail.com

Then when you receive spam/unsolicited marketing emails, you can see to which email the spam was sent, and therefore which company sold your data.

This suggests the only way to keep this behaviour is to have your own email hosted and use a truly different email per service.