I was going to quote, and respond in almost the exact same way.

The only change I would make to your suggestion would be to remove the word "insecurely".

They shouldn't extract or aggregate user data in any fashion whatsoever.