I'm guessing they have established relationships with the card issuer and will use your card number only once to establish the link, after which the card info isn't needed.