Short answer: the update API. Whenever your WordPress install makes an update check, it’ll ping wordpress.org with information about all the plugins you have, versions etc., but also whether they are currently activated or not – they then aggregate all this data from all active WordPress installs and hey presto, you get an idea of how “used” the plugin actually is.
