Seriously they did not need to handle this like this and it should be privacy first by default.