How are investors finding my private Gmail inbox?

This is honestly concerning.

I never used my personal gmail to apply for any accelerator or incubator.

(We did apply for YC a long time ago but with different email)

All of a sudden I’m getting heaps of inbound emails and voicemail drops from supposed scouts to my personal number.

Problem is I cannot tell who is legit and who is just trying to sell something. Some of the domains they’re emailing from are legit but even that could potentially be spoofed or something, no?

Is there any chance some app or game I use is just flat out selling my data?

also any advice on how to proceed here? Should I only schedule in person meets? I’m in NYC so I assume most credible parties would have some presence here?

Thanks. Appreciate any advice. First time in this situation.