Comment by lokar

They can use data gathered from your network. Perhaps you have some other connected device with an account they can match to. Or a phone.