I found a comically bad example today with an employment agency website. They give you the option of uploading your CV from Google Drive, by granting them access to EVERYTHING on your drive. No SSL either:
https://twitter.com/ServerAngels/status/793390333723893760