I was thinking about how this would happen and I remembered when signing up for services using Google login, I’d always get a list of information the website would have access to, including the name listed under the Google account. When I didn’t consent to that, I went back.

Now, is there a line somewhere between strictly getting a user’s consent and the user having an expectation of privacy? Yes, and they may have landed on the wrong side of it.

Suffice it to say, this is one of the reasons I prefer to sign up with an email address.