Sending user data to 3rd parties IS actually sneaky.  You are required by law to inform the user, among other things, and with good reason.  Whenever this is brought up some devs are dimissive, and over-confident.  More often they will deflect the problem by attacking the reporter.  Staab is the worst I've seen for this.  That is why I will call it out.  Dont send user data to 3rd parties without consent.  This is not controversial in the SLIGHTEST.