Well, that leaves name and city. Names linked to credit cards are legit but you may mistakenly target someone with the same name.

I do know for instance that someone with the exact same name and birth date as me had eye surgery at the exact same clinic as me because the clinic is dumb enough to use those two things as the primary key of the customers table...