I'm not sure how that kind of service could work without collecting that data, although I'd certainly like to know more details on "credentials that may be embedded".