If you use a product from the marketplace the vendor of the product gets your contact information. This doesn't seem controversial.

Was contacting the user a bad call by Ubuntu? Maybe, but I bet they track this kind of thing.