Probably because in many countries with actual privacy laws that stuff is illegal, but they did it anyway because they figured the risk to request made sense.